CVE-2007-3535
GL-SH Deaf Forum < 6.4.4 - Remote File Inclusion via Directory Traversal
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-3535. PoCs published by BugReport.IR, Katatafish.
AI-analyzed exploit summary This is a vulnerability writeup for CVE-2007-3535, detailing multiple vulnerabilities in GL-SH Deaf Forum <=6.5.5, including LFI, unrestricted file upload, and XSS. It provides exploit URLs and POCs but does not contain executable exploit code.
Description
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) FORUM_LANGUAGE parameter to functions.php or the (2) style parameter to bottom.php.
Exploits (2)
This is a vulnerability writeup for CVE-2007-3535, detailing multiple vulnerabilities in GL-SH Deaf Forum <=6.5.5, including LFI, unrestricted file upload, and XSS. It provides exploit URLs and POCs but does not contain executable exploit code.
This exploit demonstrates a local file inclusion (LFI) vulnerability in GL-SH Deaf Board versions <= 6.4.4. It allows an attacker to read arbitrary files on the server by manipulating the FORUM_LANGUAGE and style parameters.