CVE-2007-4655 | BDVDB-2026-26145 Detail

Description#

Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803
http://osvdb.org/40147
http://jvn.jp/jp/JVN%2320452446/index.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/36389
http://osvdb.org/40146
http://secunia.com/advisories/26614
http://www.securityfocus.com/bid/25500

Exploit#

No public exploit known

History#

Version 12007-09-04Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.