CVE-2007-5811 | BDVDB-2026-27637 Detail

Description#

Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter. NOTE: this issue is disputed for 8.0.2 by a reliable third party, who notes that the PHP code is syntactically incorrect and cannot be executed

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.attrition.org/pipermail/vim/2007-October/001844.html
http://www.attrition.org/pipermail/vim/2007-October/001845.html
https://www.exploit-db.com/exploits/4590
http://osvdb.org/39018
http://www.securityfocus.com/bid/26278
https://exchange.xforce.ibmcloud.com/vulnerabilities/38183

Exploit#

https://www.exploit-db.com/exploits/4590

History#

Version 12007-11-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.