PT-2007-6785 · Dm · Dm Guestbook

Gold_M · Published 2007-11-05 · Updated 2017-09-29 · CVE-2007-5821

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DM Guestbook versions 0.4.1 and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by including a .. (dot dot) in specific parameters, such as the lng parameter to certain API endpoints like "guestbook.php", "admin/admin.guestbook.php", or "auto/glob new.php", or the lngdefault parameter to "auto/ch lng.php".

Recommendations For DM Guestbook versions 0.4.1 and earlier, as a temporary workaround, consider restricting access to the vulnerable API endpoints, specifically "guestbook.php", "admin/admin.guestbook.php", "auto/glob new.php", and "auto/ch lng.php", until a patch is available. Avoid using the lng and lngdefault parameters in these endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2007-5821

Affected Products

Dm Guestbook

References · 9

• 🔥 https://exploit-db.com/exploits/4597 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5821 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38219 · Note
• http://osvdb.org/39065 · Note
• http://osvdb.org/39064 · Note
• http://osvdb.org/39066 · Note
• http://vupen.com/english/advisories/2007/3747 · Note
• http://securityfocus.com/bid/26300 · Note
• http://osvdb.org/39067 · Note