|
|
CVE Reference: CVE-2007-6188 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-6188 |
|
|
Description: Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) languages_n.php, (2) languages_f.php, or (3) languages.php in inc/; and (4) allow remote attackers to read arbitrary local files via a .. (dot dot) in the uri parameter to frames/nogui/sc_download.php. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/38720 http://xforce.iss.net/xforce/xfdb/38719 SAID Secunia Advisory: SA27866 OSVDB 42451 42450 42452 42453 MILW0RM http://www.milw0rm.com/exploits/4674 BID 26632 26631 |
|
| Return to the previous page. |
