PT-2007-3701 · Webspell · Webspell

Trex · Published 2007-04-30 · Updated 2017-10-11 · CVE-2007-2368

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebSPELL versions 4.01.02 and earlier

Description The issue allows remote attackers to read arbitrary files via the file parameter in the picture.php script.

Recommendations For WebSPELL versions 4.01.02 and earlier, consider restricting access to the picture.php script until a patch is available. As a temporary workaround, avoid using the file parameter in the picture.php script to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-2368

Affected Products

Webspell

References · 4

• 🔥 https://exploit-db.com/exploits/3673 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2368 · Security Note
• http://vupen.com/english/advisories/2007/1274 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2368 · Note