CVE-2007-3505

2007-07-02T19:30:00
ID CVE-2007-3505
Type cve
Reporter cve@mitre.org
Modified 2017-10-19T01:30:00

Description

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) sequence in the lang parameter to (1) qtf_checkname.php, (2) qtf_j_birth.php, or (3) qtf_j_exists.php. Successful exploitation requires that "magic_quotes_gpc" is disabled.