Skip to content

CVE-2007-5103 Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in t...

MediumCVSS 6.8 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _path parameter.

Affected products

ProductAffected versionsFixed in
wordsmith = 1.0_rc1 No fix listed

References

  • 38576 vdb-entry
  • 26924 third-party-advisory vendor-advisory
  • 4446 exploit