Vulnerabilities > CVE-2007-3772 - File-Upload vulnerability in Psnews 1.1

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
psnews
exploit available
NVD
Published: 2007-07-15
Updated: 2017-09-29

Summary

Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newspath parameter.

Vulnerable Configurations

Part Description Count
Application
Psnews
1

Exploit-Db

descriptionPsNews 1.1 (show.php newspath) Local File Inclusion Vulnerability. CVE-2007-3772. Webapps exploit for php platform
fileexploits/php/webapps/4174.txt
idEDB-ID:4174
last seen2016-01-31
modified2007-07-12
platformphp
port
published2007-07-12
reporterirk4z
sourcehttps://www.exploit-db.com/download/4174/
titlePsNews 1.1 show.php newspath Local File Inclusion Vulnerability
typewebapps

References