CVE-2007-1487 Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a...
MediumCVSS 5.0
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a showarticles action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cyber inside weblog | All versions | No fix listed |
| cyberteddy weblog | All versions | No fix listed |
| sascha schroeder weblog | All versions | No fix listed |
References
- 34043 vdb-entry
- 24521 third-party-advisory vendor-advisory
- 22995 vdb-entry
- ADV-2007-0967 vdb-entry
- weblog-index-directory-traversal(32998) vdb-entry
- 3484 exploit