Vulnerabilities > CVE-2007-1509 - Directory Traversal vulnerability in Holtstraeter Rot 13

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
holtstraeter
exploit available
NVD
Published: 2007-03-20
Updated: 2018-10-16

Summary

Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote attackers to read arbitrary files via a .. (dot dot) in the datei parameter.

Vulnerable Configurations

Part Description Count
Application
Holtstraeter
1

Exploit-Db

descriptionHoltstraeter Rot 13 Enkrypt.PHP Directory Traversal Vulnerability. CVE-2007-1509. Webapps exploit for php platform
idEDB-ID:29748
last seen2016-02-03
modified2007-03-16
published2007-03-16
reporterBorN To K!LL
sourcehttps://www.exploit-db.com/download/29748/
titleHoltstraeter Rot 13 Enkrypt.PHP Directory Traversal Vulnerability

References