CVE-2007-6567

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier...

6.4 MediumPublic exploit

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pagename parameter in a page view action.

Exploit likelihood

7.02%Up 5.7 points since Feb 4, 2022

What each source reports

NVD Score used6.4

Record: CVE-2007-6567
CVSS 2.0: 6.4 MediumAV:N/AC:L/Au:N/C:P/I:P/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE ListNo score

Record: CVE-2007-6567
Updated: 2026-11-02

EUVDEUVD-2007-6533No score

Record: EUVD-2007-6533
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7p7x-rfv5-5c5jNo score

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier...

Record: GHSA-7p7x-rfv5-5c5j
Weakness: CWE-22
Updated: 2026-11-02

Affected products

xzero scripts community classifieds

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	XZero Community Classifieds 4.95.11 - Local File Inclusion / SQL Injection	2007-12-26

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6567 is a medium vulnerability (CVSS 6.4) in Xzero Scripts Community Classifieds, published December 28, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.02%, the 94th percentile. No source names a fixed version.