CVE-2007-5092

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion2007-09-25 · webapps · php · Verified

Impact

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in an ACCEPT_FILE array parameter to modules.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/37335
• http://secunia.com/advisories/26958
• http://securityreason.com/securityalert/3169
• http://www.securityfocus.com/archive/1/480578/100/0/threaded
• http://www.securityfocus.com/bid/25806
• http://www.waraxe.us/advisory-54.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36772
• http://osvdb.org/37335
• http://secunia.com/advisories/26958
• http://securityreason.com/securityalert/3169
• http://www.securityfocus.com/archive/1/480578/100/0/threaded
• http://www.securityfocus.com/bid/25806
• http://www.waraxe.us/advisory-54.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36772