CVE-2007-5103 in Wordsmith
Summary
Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _path parameter.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
09/26/2007
Disclosure
09/26/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 38970 | Wordsmith config.inc.php path traversal | 22 | Proof-of-Concept | Not defined | CVE-2007-5103 |