Vulnerabilities > CVE-2007-0335 - Local File Include vulnerability in JAX Scripts JAX Petition Book 1.0.3.06

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
jax-scripts
exploit available
NVD
Published: 2007-01-18
Updated: 2018-10-16

Summary

Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the languagepack parameter to (1) jax_petitionbook.php or (2) smileys.php.

Vulnerable Configurations

Part Description Count
Application
Jax_Scripts
1

Exploit-Db

  • descriptionJax Petition Book 3.06 jax_petitionbook.php languagepack Parameter Local File Inclusion. CVE-2007-0335. Webapps exploit for php platform
    idEDB-ID:29468
    last seen2016-02-03
    modified2007-01-15
    published2007-01-15
    reporterilker Kandemir
    sourcehttps://www.exploit-db.com/download/29468/
    titleJax Petition Book 3.06 jax_petitionbook.php languagepack Parameter Local File Inclusion
  • descriptionJax Petition 3.06 Book smileys.php languagepack Parameter Local File Inclusion. CVE-2007-0335. Webapps exploit for php platform
    idEDB-ID:29469
    last seen2016-02-03
    modified2007-01-15
    published2007-01-15
    reporterilker Kandemir
    sourcehttps://www.exploit-db.com/download/29469/
    titleJax Petition 3.06 Book smileys.php languagepack Parameter Local File Inclusion

References