CVE-2007-6552

CVE-2007-6552 describes a directory traversal vulnerability in AuraCMS 2.2, specifically within the index.php file. This flaw allows remote authenticated users to include and execute arbitrary local files by manipulating the 'act' parameter with a '..' sequence, potentially bypassing security mechanisms. With a CVSS score of 6.0, this vulnerability is of medium severity, requiring authentication (Au:S) and moderate attack complexity (AC:M) to achieve partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). While not listed on the KEV catalog or Hot List, an exploit for adding an administrator is available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.