Description (CNA)
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25067
- http://www.vupen.com/english/advisories/2006/0839
- http://securityreason.com/securityalert/542
- http://www.securityfocus.com/archive/1/426769/100/0/threaded
- http://secunia.com/advisories/19115
- http://notlegal.ws/simplogsploit.txt
- http://www.securityfocus.com/bid/16965
ADP enrichment
No English description supplied.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25067
- http://www.vupen.com/english/advisories/2006/0839
- http://securityreason.com/securityalert/542
- http://www.securityfocus.com/archive/1/426769/100/0/threaded
- http://secunia.com/advisories/19115
- http://notlegal.ws/simplogsploit.txt
- http://www.securityfocus.com/bid/16965