CVE-2007-4820: Sisfo Kampus

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter.

Affected products

• Sisfo Kampus Sisfo Kampus: version 2006 only

Published 2007-09-11. Last modified 2026-06-16.