CVE-2008-7055: Visualshapers Ezcontents

Medium severity, CVSS 5.1. EPSS: 2% chance of exploitation in the next 30 days.

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.

Affected products

• Visualshapers Ezcontents: version 2.0.3 only

Published 2009-08-24. Last modified 2026-06-16.