Vulnerabilities > CVE-2007-1127 - Local File Include vulnerability in Watersweb Shops Shop KIT Plus Initial

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
watersweb-shops
exploit available
NVD
Published: 2007-02-27
Updated: 2018-10-16

Summary

Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via a .. (dot dot) in the changetheme parameter.

Vulnerable Configurations

Part Description Count
Application
Watersweb_Shops
1

Exploit-Db

descriptionShop Kit Plus StyleCSS.PHP Local File Include Vulnerability. CVE-2007-1127. Webapps exploit for php platform
idEDB-ID:29640
last seen2016-02-03
modified2007-02-23
published2007-02-23
reporterlaurent gaffie
sourcehttps://www.exploit-db.com/download/29640/
titleShop Kit Plus StyleCSS.PHP Local File Include Vulnerability

References