CVE-2007-0609
Advanced Guestbook 2.4.2 - Directory Traversal via Lang Cookie
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-0609. PoCs published by netVigilance.
AI-analyzed exploit summary The provided text describes a local file inclusion vulnerability in Advanced Guestbook 2.4.2, where unsanitized user input allows unauthorized file access and script execution. The example URL demonstrates path traversal to access arbitrary files.
Description
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. (dot dot) in a lang cookie, followed by a filename without its .php extension, as demonstrated via a request to index.php.
Exploits (1)
The provided text describes a local file inclusion vulnerability in Advanced Guestbook 2.4.2, where unsanitized user input allows unauthorized file access and script execution. The example URL demonstrates path traversal to access arbitrary files.