CVE-2007-1801
Sblog - Path Traversal
Title source: ruleDescription
Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the conf_lang_default parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by inc/lang.php.
Exploits (1)
References (4)
Scores
EPSS
0.0721
EPSS Percentile
91.5%
Classification
Status
draft
Affected Products (1)
sblog/sblog
Timeline
Published
Apr 02, 2007
Tracked Since
Feb 18, 2026