critical9.3Public exploit code
CVE-2007-0585
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Webfwlog 0.92 - 'debug.php' Remote File Disclosure2007-01-29 · webapps · php · Verified
Impact
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webfwlog | Webfwlog | through 0.92 |
References
- NVD record
- CVE.org record
- http://osvdb.org/33015
- http://secunia.com/advisories/23968
- http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLog
- http://www.securityfocus.com/bid/22291
- http://www.vupen.com/english/advisories/2007/0399
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31881
- https://www.exploit-db.com/exploits/3222
- http://osvdb.org/33015
- http://secunia.com/advisories/23968
- http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLog
- http://www.securityfocus.com/bid/22291
- http://www.vupen.com/english/advisories/2007/0399
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31881
- https://www.exploit-db.com/exploits/3222