CVE-2007-5491 Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang paramete...
HighCVSS 9.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitebar | = 3.3.8 | No fix listed |
References
- 27503 third-party-advisory
- 28008 third-party-advisory
- teamforge.net
- DSA-1423 vendor-advisory
- GLSA-200711-05 vendor-advisory
- 26126 vdb-entry
- ADV-2007-3768 vdb-entry
- bugs.gentoo.org