CVE-2007-1100 Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
HighCVSS 7.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pickle | All versions | No fix listed |
References
- 33763 vdb-entry
- 24294 third-party-advisory vendor-advisory
- 2293 third-party-advisory
- user.ceng.metu.edu.tr
- 20070223 pickle download local file mailing-list
- 22703 exploit vdb-entry
- ADV-2007-0748 vdb-entry
- pickle-download-directory-traversal(32712) vdb-entry