PT-2007-3273 · Witshare · Witshare

Published 2007-04-10 · Updated 2018-10-16 · CVE-2007-1928

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions witshare version 0.9

Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. (dot dot) in the menu parameter of the index.php file, enabling directory traversal.

Recommendations For witshare version 0.9, consider restricting access to the index.php file or the menu parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the menu parameter in the index.php file until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-1928

Affected Products

Witshare

References · 8

• 🔥 https://exploit-db.com/exploits/3686 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1928 · Security Note
• http://securityfocus.com/bid/23358 · Vendor Advisory
• http://vupen.com/english/advisories/2007/1303 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33496 · Note
• http://securityreason.com/securityalert/2539 · Note
• http://securityfocus.com/archive/1/464969/100/0/threaded · Note
• http://secunia.com/advisories/24813 · Note