CVE-2007-2050 Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) a lang cookie or (2) the la...
MediumCVSS 5.0
EPSS 3.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) a lang cookie or (2) the language parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ricargbook | = 1.2.1 | No fix listed |
References
- 34909 vdb-entry
- 24858 third-party-advisory vendor-advisory
- 23450 vdb-entry
- ADV-2007-1370 vdb-entry
- ricargbook-header-file-include(33596) vdb-entry
- 3718 exploit