CVE-2007-5069

EPSS 3.0%

Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4447unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/26923 https://exchange.xforce.ibmcloud.com/vulnerabilities/36745 https://www.exploit-db.com/exploits/4447 http://www.securityfocus.com/archive/1/480441/100/0/threaded http://www.securityfocus.com/bid/25784 http://www.vupen.com/english/advisories/2007/3252