CVE-2006-7080
exv2 content management system: no CVSS score yet. EPSS 4.7% chance of exploitation in the next 30 days.
Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files via ".." sequences in the old_avatar parameter.
- EPSS
- 4.7% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- exv2:content_management_system