41110vdb entry
http://osvdb.org/41110 CVE-2007-5694
SiteBar 3.3.8 - 'translator.php?dir' Traversal Arbitrary File Access
Record summary
CVE-2007-5694 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSiteBar 3.3.8 - 'translator.php?dir' Traversal Arbitrary File AccessExploitDB exploitby Robert BuchholzNot analyzed1 file
References
1127503Third-party advisory
http://secunia.com/advisories/27503 28008Third-party advisory
http://secunia.com/advisories/28008 3318Third-party advisory
http://securityreason.com/securityalert/3318 teamforge.netConfirmation
http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup DSA-1423Vendor advisory
http://www.debian.org/security/2007/dsa-1423 GLSA-200711-05Vendor advisory
http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml 20071018 Serious holes affecting SiteBar 3.3.8mailing list
http://www.securityfocus.com/archive/1/482499/100/0/threaded 26126vdb entry
http://www.securityfocus.com/bid/26126 ADV-2007-3768vdb entry
http://www.vupen.com/english/advisories/2007/3768 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-5694