Beveiligingsadvies

CVE-2007-0609

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-05-09 17:00:00

Laatst bijgewerkt 2024-08-07 12:26:54

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. (dot dot) in a lang cookie, followed by a filename without its .php extension, as demonstrated via a request to index.php.

← Alle CVE's bekijken Bekijk op cve.org ↗