CVE-2007-5802 Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pa...
HighCVSS 7.5
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a duplicate function declaration.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| firewolf technologies synergiser | <= 1.2_rc1 | No fix listed |
References
- 38371 vdb-entry
- 27466 third-party-advisory
- 3335 third-party-advisory
- www.inj3ct-it.org exploit
- 20071101 Synergiser <= 1.2 RC1 Local File Inclusion & Full path disclosure mailing-list
- 26289 exploit vdb-entry
- ADV-2007-3745 vdb-entry
- synergiser-index-file-include(38217) vdb-entry
- synergiser-index-path-disclosure(38218) vdb-entry