CVE-2007-1851 Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the __class param...
HighCVSS 7.5
EPSS 6.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the __class parameter to (1) Controller_v4.php or (2) Controller_v5.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| really simple php and ajax | = 2007-03-23 | No fix listed |
References
- 24671 third-party-advisory vendor-advisory
- www.bugtraq.ir
- ADV-2007-1190 vdb-entry
- rspa-class-file-include(33357) vdb-entry
- 3641 exploit