CVE-2007-6604

CVE-2007-6604 describes multiple directory traversal vulnerabilities in XCMS 1.82 and earlier versions. Attackers can exploit these flaws by manipulating the 's' parameter in the admin page or the 'pg' parameter in arbitrary modules, allowing them to read arbitrary files, including sensitive password hashes or execute embedded PHP code. The vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, potentially leading to information disclosure. While not listed on CISA's KEV catalog, an ExploitDB entry (EDB-4802) confirms the existence of exploit code for local/remote file inclusion, though there is no evidence of active exploitation or significant community discussion.