37884vdb entry
http://osvdb.org/37884 CVE-2007-3619
Maia Mailguard 1.0.2 - 'login.php' Multiple Local File Inclusions
Record summary
CVE-2007-3619 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMaia Mailguard 1.0.2 - 'login.php' Multiple Local File InclusionsExploitDB exploitby Adriel T. DesautelsNot analyzed1 file
References
1125951Third-party advisory
http://secunia.com/advisories/25951 2864Third-party advisory
http://securityreason.com/securityalert/2864 maiamailguard.orgConfirmation
http://www.maiamailguard.org/maia/changeset/1184 maiamailguard.orgConfirmation
http://www.maiamailguard.org/maia/ticket/479 netragard.com
http://www.netragard.com/pdfs/research/NETRAGARD-20070628-MAILGUARD.txt 20070705 [NETRAGARD SECURITY ADVISORY][Maia Mailguard 1.0.2 Arbitrary Code Execution][NETRAGARD-20070628]mailing list
http://www.securityfocus.com/archive/1/472886/100/0/threaded 24770vdb entry
http://www.securityfocus.com/bid/24770 1018338vdb entry
http://www.securitytracker.com/id?1018338 ADV-2007-2456vdb entry
http://www.vupen.com/english/advisories/2007/2456 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-3619