CVE-2007-6187

CVE-2007-6187 describes multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) versions 0.9 pre 1.2 and earlier. Attackers can exploit these flaws by manipulating the 'filepath' parameter in specific PHP files (css_file.php, js_file.php, or xml_file.php) to read arbitrary files on the affected system. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, leading to potential information disclosure. While not listed on the KEV catalog or Hot List, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.