CVE-2007-5811: Phpmyconferences

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter. NOTE: this issue is disputed for 8.0.2 by a reliable third party, who notes that the PHP code is syntactically incorrect and cannot be executed

Affected products

• Phpmyconferences Phpmyconferences: up to and including 8.0.2

Published 2007-11-05. Last modified 2026-06-16.