CVE-2007-2934 Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter.
HighCVSS 7.8
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitrary files via a .. (dot dot) in the skin parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| windy road vistered little | = 1.6a | No fix listed |
References
- 38350 vdb-entry
- 20070530 true: Vistered Little 1.6a directory traversal exploit mailing-list
- 24178 vdb-entry
- visteredlittle-common-directory-traversal(34546) vdb-entry
- 3999 exploit