CVE-2007-0389: Arsdigita Community Education Solution

High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Education Solution (ACES) 1.1, allows remote attackers to read arbitrary files via .%252e/ (double-encoded dot dot slash) sequences in the URI.

Affected products

• Arsdigita Arsdigita Community Education Solution: version 1.1 only
• Arsdigita Arsdigita Community System: up to and including 3.4.10

Published 2007-01-19. Last modified 2026-06-16.