PT-2007-3701 · Webspell · Webspell

Trex · Publicado 2007-04-30 · Atualizado 2017-10-11 · CVE-2007-2368

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebSPELL versions 4.01.02 and earlier

Description The issue allows remote attackers to read arbitrary files via the file parameter in the picture.php script.

Recommendations For WebSPELL versions 4.01.02 and earlier, consider restricting access to the picture.php script until a patch is available. As a temporary workaround, avoid using the file parameter in the picture.php script to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2368

Produtos afetados

Webspell

Referências · 4

• 🔥 https://exploit-db.com/exploits/3673 · Exploit
• http://vupen.com/english/advisories/2007/1274 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2368 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2368 · Nota