VULNERABILITY INTELLIGENCE

CVE-2006-7080

CVSS score4.3 MEDIUM
EPSS probability4.72%
CISA KEVNot currently listed
Published2007-03-02
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files via ".." sequences in the old_avatar parameter.

Primary references