CVE-2007-1773
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list...
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (dot dot) in the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php, different vectors than CVE-2006-6384.
Exploit likelihood
What each source reports
NVD Score used
2.6
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (dot dot) in the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php, different vectors than CVE-2006-6384.
- Record
CVE-2007-1773- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (dot dot) in the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php, different vectors than CVE-2006-6384.
- Record
CVE-2007-1773- Updated
- 2026-11-02
EUVDEUVD-2007-1767 No score
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (dot dot) in the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php, different vectors than CVE-2006-6384.
- Record
EUVD-2007-1767- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7w84-5x2h-56hv No score
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list...
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (dot dot) in the d parameter to (1) whizzery/whizzypic.php or (2) whizzery/whizzylink.php, different vectors than CVE-2006-6384.
- Record
GHSA-7w84-5x2h-56hv- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | aBitWhizzy - 'whizzypic.php?d' Traversal Arbitrary Directory Listing | 2007-03-14 |
| Exploit-DB | aBitWhizzy - 'whizzylink.php?d' Traversal Arbitrary Directory Listing | 2007-03-14 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1773 is a low vulnerability (CVSS 2.6) in Unverse.net Abitwhizzy, published March 30, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.33%, the 88th percentile. No source names a fixed version.