CVE-2007-5465: Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and exec...

Security readout for executives and security teams

CVE-2007-5465 affects legacy doop CMS 1.3.7 and earlier. A remote attacker could abuse path traversal in a page parameter to include and execute local files. That can expose sensitive server content or run unintended application code. The source bundle does not identify a vendor patch or current supported status. Exposure is most likely on old internet-facing sites still running doop CMS 1.3.7 or earlier. The affected metadata is incomplete, with vendor, product, CPEs, and exact component listed as n/a or unspecified, so validation must rely on asset inventory and application inspection. Prioritize remediation if doop CMS is present and internet-facing. The issue is old but serious because it can lead to local file inclusion and execution. If the product is not deployed, record that finding and no further action is likely needed. Mitigation focus: Identify and retire doop CMS 1.3.7 or earlier where possible.; Check vendor or archived advisory sources for any supported fixed release.; Remove public internet exposure until the application is replaced or validated..

Prepared

Jun 29, 2026, 02:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.