CVE-2007-1539

EPSS 3.2%

Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the module_name parameter, as demonstrated via a static PHP code injection attack in an Apache log file.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3521unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34306 http://secunia.com/advisories/24589 https://exchange.xforce.ibmcloud.com/vulnerabilities/33084 https://www.exploit-db.com/exploits/3521 http://www.securityfocus.com/bid/23044 http://www.vupen.com/english/advisories/2007/1030