NVD

Id
52831  
Name
CVE-2007-0609  
Description
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. (dot dot) in a lang cookie, followed by a filename without its .php extension, as demonstrated via a request to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-09  
Modified Date
2011-03-07  
Seq
2007-0609  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266987 52831 CVE-2007-0609 2662  View
266988 52831 CVE-2007-0609 http://www.netvigilance.com/advisory0012  View
266989 52831 CVE-2007-0609 http://www.netvigilance.com/advisory0013  View
266990 52831 CVE-2007-0609 20070507 Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities  View
266991 52831 CVE-2007-0609 20070507 Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability  View
266992 52831 CVE-2007-0609 23876  View
266993 52831 CVE-2007-0609 ADV-2007-1726  View
266994 52831 CVE-2007-0609 advanced-index-directory-traversal(34152)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52787 JVNDB-2007-001479 Advanced Guestbook におけるディレクトリトラバーサルの脆弱性 Advanced Guestbook には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-0609 23964 CVE-2007-0609 52831 5.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001479.html 2007-05-09 2012-06-26 View