Vulnerabilities > CVE-2007-1100 - Local File Include vulnerability in Pickle

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
pickle
exploit available
NVD
Published: 2007-02-26
Updated: 2018-10-16

Summary

Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Vulnerable Configurations

Part Description Count
Application
Pickle
1

Exploit-Db

descriptionPickle 0.3 Download.PHP Local File Include Vulnerability. CVE-2007-1100. Webapps exploit for php platform
idEDB-ID:29644
last seen2016-02-03
modified2007-02-24
published2007-02-24
reporterlaurent gaffie
sourcehttps://www.exploit-db.com/download/29644/
titlePickle 0.3 Download.PHP Local File Include Vulnerability

References