CVE-2007-5299

EPSS 8.3%

Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. (dot dot) in the view_mode parameter to (1) featured_list.php and (2) online_list.php in member/.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4493unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38456 http://osvdb.org/38457 http://secunia.com/advisories/27114 https://exchange.xforce.ibmcloud.com/vulnerabilities/37001 https://www.exploit-db.com/exploits/4493 http://www.securityfocus.com/bid/25954 http://www.vupen.com/english/advisories/2007/3432