CVE-2007-5821

EPSS 5.5%

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lng parameter to (a) guestbook.php, (b) admin/admin.guestbook.php, or (c) auto/glob_new.php; or (2) the lngdefault parameter to auto/ch_lng.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4597unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/39064 http://osvdb.org/39065 http://osvdb.org/39066 http://osvdb.org/39067 https://exchange.xforce.ibmcloud.com/vulnerabilities/38219 https://www.exploit-db.com/exploits/4597 http://www.securityfocus.com/bid/26300 http://www.vupen.com/english/advisories/2007/3747