CVE-2007-1140: Barekoncept Pheap

High severity, CVSS 9.4. EPSS: 3.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a .. (dot dot) in the filename parameter.

Affected products

• Barekoncept Pheap: affected versions not specified

Published 2007-03-02. Last modified 2026-06-16.