CVE-2007-2681 in b2evolution

Resumen (Inglés)

Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the core_subdir parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2007-05-14

Divulgación

2007-05-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
36807	b2evolution Core recorrido de directorios	22	No probado	Unavailable	CVE-2007-2681

Fuentes

• MITRE
• NVD
• CVE Details