CVE-2007-1933

CVE-2007-1933 describes multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 that allow remote attackers to include and execute arbitrary local files through a ".." in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php. The root cause is directory traversal le...

pcp-lfi.txt

.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal.......: PcP-Book 3.0 Site.........: http://www.pcp-system.at Down.........: http://www.ectona.org/download/?id=621&s=info Author.......: Dj7xpl | [email protected] ++ ++...

CVE-2007-1933: Undefined Security Weakness

Multiple directory traversal vulnerabilities in PcP-Guestbook PcP-Book 3.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 index.php, 2 gb.php, or 3 faq.php...