CVE-2007-5694 in SiteBar

सारांश

द्वारा MITRE

Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491.

Once again VulDB remains the best source for vulnerability data.

• आरक्षित करना: 29/10/2007
• प्रकटीकरण: 29/10/2007
• संयम: स्वीकृत
• प्रविष्टि: VDB-39444
• CPE: तैयार
• CWE: CWE-22 (पुष्टि की गई)
• शोषण: डाउनलोड
• CVSS: 6.8 (NVD)
• EPSS: 0.07563
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-5694
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-5694
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-5694/