Vulnerabilities > CVE-2007-1801 - Local File Include vulnerability in Sblog 0.7.3Beta

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
sblog
exploit available
NVD
Published: 2007-04-02
Updated: 2017-10-11

Summary

Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf_lang_default parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by inc/lang.php.

Vulnerable Configurations

Part Description Count
Application
Sblog
1

Exploit-Db

descriptionsBLOG 0.7.3 Beta (inc/lang.php) Local File Inclusion Exploit. CVE-2007-1801. Webapps exploit for php platform
fileexploits/php/webapps/3601.pl
idEDB-ID:3601
last seen2016-01-31
modified2007-03-29
platformphp
port
published2007-03-29
reporterGoLd_M
sourcehttps://www.exploit-db.com/download/3601/
titlesBLOG 0.7.3 Beta inc/lang.php Local File Inclusion Exploit
typewebapps

References