| |||||||||||||
| ID de CVE: | CVE-2007-5694 |
| Descripción: | Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491. |
| Prueba de IDs: | 1.3.6.1.4.1.25623.1.0.59958 |
| Referencias Cruzadas: |
Common Vulnerability Exposure (CVE) ID: CVE-2007-5694 Bugtraq: 20071018 Serious holes affecting SiteBar 3.3.8 (Google Search) http://www.securityfocus.com/archive/1/archive/1/482499/100/0/threaded Debian Security Information: DSA-1423 (Google Search) http://www.debian.org/security/2007/dsa-1423 http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml BugTraq ID: 26126 http://www.securityfocus.com/bid/26126 http://www.vupen.com/english/advisories/2007/3768 http://osvdb.org/41110 http://secunia.com/advisories/27503 http://secunia.com/advisories/28008 http://securityreason.com/securityalert/3318 |
|