downloads.sourceforge.netConfirmation
http://downloads.sourceforge.net/project-alumni/security-patch-1.0.9.zip?modtime=1196251519&big_mirror=0 CVE-2007-6184
project alumni 1.0.9 - 'index.php?act' Local File Inclusion
Record summary
CVE-2007-6184 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBproject alumni 1.0.9 - 'index.php?act' Local File InclusionExploitDB exploitby tomplixseeNot analyzed1 file
References
627820Third-party advisory
http://secunia.com/advisories/27820 26612vdb entry
http://www.securityfocus.com/bid/26612 projectalumni-index-directory-traversal(38681)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/38681 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-6184 4669exploit
https://www.exploit-db.com/exploits/4669