CVE-2007-1577

GeBlog 0.1 - Directory Traversal and Remote Code Execution via GLOBALS[tplname] Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-1577. PoCs published by GoLd_M.

AI-analyzed exploit summary This exploit targets a Local File Inclusion (LFI) vulnerability in GeBlog 0.1 by injecting PHP code into Apache log files and then including them via the vulnerable parameter. It provides a shell-like interface to execute commands on the target system.

Description

Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tplname] parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by GoLd_M · perlwebappsphp

https://www.exploit-db.com/exploits/3522

View Code ZIP pw:eip

This exploit targets a Local File Inclusion (LFI) vulnerability in GeBlog 0.1 by injecting PHP code into Apache log files and then including them via the vulnerable parameter. It provides a shell-like interface to execute commands on the target system.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: GeBlog 0.1

No auth needed

Prerequisites: Apache log file write access · GeBlog 0.1 installation with vulnerable parameter

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4

Core References

Exploit, Third Party Advisory exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/3522

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/33089

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/33776

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/23052

Scores

EPSS 0.0283

EPSS Percentile 84.7%

Details

Status published

Products (1)

geblog/geblog 0.1

Published Mar 21, 2007

Tracked Since Feb 18, 2026