← back
CVE-2007-0585

CVE-2007-0585

EPSS 3.8%
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/3222unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/33015http://secunia.com/advisories/23968https://exchange.xforce.ibmcloud.com/vulnerabilities/31881https://www.exploit-db.com/exploits/3222http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLoghttp://www.securityfocus.com/bid/22291http://www.vupen.com/english/advisories/2007/0399