CVE-2007-0919

Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6...

7.8 HighPublic exploit

Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory immediately above the web root via a ..%00 sequence in the URI.

Exploit likelihood

3.76%Down 3.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2007-0919
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:C/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-0919
Updated: 2026-11-02

EUVDEUVD-2007-0913 No score

Record: EUVD-2007-0913
Updated: 2026-11-03

GitHub AdvisoriesGHSA-r3q9-pqq6-426w No score

Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6...

Record: GHSA-r3q9-pqq6-426w
Updated: 2026-11-02

Affected products

nickolas grigoriadis mini web server

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	MiniWebsvr 0.0.7 - Remote Directory Traversal	2007-04-11
Exploit-DB	MiniWebsvr 0.0.9a - Remote Directory Traversal	2008-03-03

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-0919 is a high vulnerability (CVSS 7.8) in Nickolas Grigoriadis Mini Web Server, published February 14, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.76%, the 89th percentile. No source names a fixed version.