CVE-2007-6230 Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the CFG[s...
HighCVSS 7.5
EPSS 6.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in common/classes/class_HeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the CFG[site][project_path] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rayzz script | = 2.0 | No fix listed |
References
- 39694 vdb-entry
- rayzz-classheaderhandlerlib-file-include(38802) vdb-entry
- 4685 exploit