Vulnerabilities > CVE-2007-2960 - Unspecified vulnerability in Scallywag.Org Scallywag 20050425
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin_name parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/, a different vector than CVE-2007-2900. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
References
- http://osvdb.org/38039
- http://osvdb.org/38039
- http://osvdb.org/38040
- http://osvdb.org/38040
- http://osvdb.org/38041
- http://osvdb.org/38041
- http://www.vupen.com/english/advisories/2007/1933
- http://www.vupen.com/english/advisories/2007/1933
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34469
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34469