CVE-2007-0585 include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obt...
HighCVSS 9.3
EPSS 4.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webfwlog | <= 0.92 | No fix listed |
References
- 33015 vdb-entry
- 23968 third-party-advisory
- webfwlog.cvs.sourceforge.net
- 22291 vdb-entry
- ADV-2007-0399 vdb-entry
- webfwlog-debug-file-include(31881) vdb-entry
- 3222 exploit