CVE-2007-5694 in SiteBar

Riassunto

di MITRE

Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 29/10/2007
• Divulgazione: 29/10/2007
• Moderazione: accettato
• Voce: VDB-39444
• CPE: pronto
• CWE: CWE-22 (confermato)
• Sfruttamento: Scaricare
• CVSS: 6.8 (NVD)
• EPSS: 0.07563
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-5694
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-5694
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-5694/