Directory traversal

2008-02-1201:00:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.6%

JSON

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a … (dot dot) in the (1) permalink or (2) section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php.

CPENameOperatorVersion
sflogle0.96

CPE	Name	Operator	Version
	sflog	le	0.96

References

securityreason.com/securityalert/3629

www.securityfocus.com/archive/1/487368/100/0/threaded

www.securityfocus.com/bid/27541

exchange.xforce.ibmcloud.com/vulnerabilities/40115

www.exploit-db.com/exploits/5027