Beveiligingsadvies

CVE-2007-0585

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-01-30 17:00:00
Laatst bijgewerkt 2024-08-07 12:26:53
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks.