Directory traversal

2007-11-0519:46:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.044 Low

EPSS

Percentile

92.4%

JSON

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local files via a … (dot dot) in (1) the lng parameter to (a) guestbook.php, (b) admin/admin.guestbook.php, or © auto/glob_new.php; or (2) the lngdefault parameter to auto/ch_lng.php.

CPENameOperatorVersion
dm_guestbookle0.4.1

CPE	Name	Operator	Version
	dm_guestbook	le	0.4.1

References

osvdb.org/39064

osvdb.org/39065

osvdb.org/39066

osvdb.org/39067

www.securityfocus.com/bid/26300

www.vupen.com/english/advisories/2007/3747

exchange.xforce.ibmcloud.com/vulnerabilities/38219

www.exploit-db.com/exploits/4597