CVE-2007-5299 Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. (dot dot) in the view_mode param...
MediumCVSS 5.0
EPSS 8.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. (dot dot) in the view_mode parameter to (1) featured_list.php and (2) online_list.php in member/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skadate online dating software | = 5.0 | No fix listed |
| skadate online dating software | = 6.0 | No fix listed |
| skadate online dating software | = 6.482 | No fix listed |
References
- 38456 vdb-entry
- 38457 vdb-entry
- 27114 third-party-advisory vendor-advisory
- 25954 vdb-entry
- ADV-2007-3432 vdb-entry
- skadate-featuredlist-directory-traversal(37001) vdb-entry
- 4493 exploit