CVE

Id
26104  
CVE No.
CVE-2007-2747  
Status
Candidate  
Description
Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to the /browse URI.  
Phase
Assigned (20070517)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262588 26104 CVE-2007-2747 MLIST:[rdiffweb-discuss] 20070329 New features and changes to rdiffweb  View
262589 26104 CVE-2007-2747 URL:https://lists.berlios.de/pipermail/rdiffweb-discuss/2007-March/000100.html  View
262590 26104 CVE-2007-2747 CONFIRM:http://www.rdiffweb.org/wiki/index.php?title=Roadmap#Version_0.3.5.1  View
262591 26104 CVE-2007-2747 BID:24092  View
262592 26104 CVE-2007-2747 URL:http://www.securityfocus.com/bid/24092  View
262593 26104 CVE-2007-2747 VUPEN:ADV-2007-1775  View
262594 26104 CVE-2007-2747 URL:http://www.vupen.com/english/advisories/2007/1775  View
262595 26104 CVE-2007-2747 OSVDB:36519  View
262596 26104 CVE-2007-2747 URL:http://osvdb.org/36519  View
262597 26104 CVE-2007-2747 SECUNIA:25368  View
262598 26104 CVE-2007-2747 URL:http://secunia.com/advisories/25368  View
262599 26104 CVE-2007-2747 XF:rdiffweb-rdwhelpers-directory-traversal(33734)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53348 JVNDB-2007-002040 FAQEngine の question.php における SQL インジェクションの脆弱性 FAQEngine の question.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2749 26104 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002040.html  View