Vulnerabilities > CVE-2007-3266 - Local File Include vulnerability in WebIf OutConfig Parameter

047910
CVSS 9.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
ifnet
critical
exploit available
NVD
Published: 2007-06-19
Updated: 2018-10-16

Summary

Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary local files a .. (dot dot) in the outconfig parameter.

Vulnerable Configurations

Part Description Count
Application
Ifnet
1

Exploit-Db

descriptionWebIf OutConfig Parameter Local File Include Vulnerability. CVE-2007-3266. Webapps exploit for cgi platform
idEDB-ID:30199
last seen2016-02-03
modified2007-06-18
published2007-06-18
reportermaiosyet
sourcehttps://www.exploit-db.com/download/30199/
titleWebIf OutConfig Parameter Local File Include Vulnerability

References