Vulnerabilities > CVE-2007-0098 - File-Upload vulnerability in VerliAdmin

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
verliadmin
exploit available
NVD
Published: 2007-01-05
Updated: 2017-10-19

Summary

Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.

Vulnerable Configurations

Part Description Count
Application
Verliadmin
1

Exploit-Db

descriptionVerliAdmin <= 0.3 (language.php) Local File Inclusion Exploit. CVE-2007-0098. Webapps exploit for php platform
fileexploits/php/webapps/3075.pl
idEDB-ID:3075
last seen2016-01-31
modified2007-01-03
platformphp
port
published2007-01-03
reporterKw3[R]Ln
sourcehttps://www.exploit-db.com/download/3075/
titleVerliAdmin <= 0.3 language.php Local File Inclusion Exploit
typewebapps

References