Chupix Cms vulnerabilities

CVE-2007-4957 [HIGH] CWE-22 CVE-2007-4957: Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attack Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a .. (dot dot) in the (3) repertoire parameter.

CVE-2007-5139 [MEDIUM] CWE-94 CVE-2007-5139: PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_g PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter.

CVE-2008-3562 [MEDIUM] CWE-22 CVE-2008-3562: Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic Directory traversal vulnerability in index.php in the Contact module in Chupix CMS 0.1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mods parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.