Directory traversal

2008-01-3022:00:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.9%

JSON

Directory traversal vulnerability in install.php in Clansphere 2007.4.4 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the lang parameter.

CPENameOperatorVersion
clansphereeq2007.4.4

CPE	Name	Operator	Version
	clansphere	eq	2007.4.4

References

securityreason.com/securityalert/3597

www.securityfocus.com/archive/1/487132/100/0/threaded

www.securityfocus.com/bid/27471

exchange.xforce.ibmcloud.com/vulnerabilities/39977