CVE-2007-5802 in Synergiserinfo

Summary

Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a duplicate function declaration.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

11/02/2007

Disclosure

11/02/2007

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.23775

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!