GLSA-200711-05 : SiteBar: Multiple issues

"The remote host is affected by the vulnerability described in GLSA-200711-05 SiteBar: Multiple issues Tim Brown discovered these multiple issues: the translation module does not properly sanitize the value to the 'dir' parameter CVE-2007-5491, CVE-2007-5694 %NASLMINLEVEL 70300 C Tenable Network...

SiteBar: Multiple issues

Background SiteBar is a PHP application that allows users to store their bookmarks on a web server. Description Tim Brown discovered these multiple issues: the translation module does not properly sanitize the value to the "dir" parameter CVE-2007-5491, CVE-2007-5694; the translation module also...

CVE-2007-5694

The CVE-2007-5694 issue affects SiteBar 3.3.8 and earlier, originating from the translation module (translator.php) where an absolute path in dir enables remote authenticated users to read arbitrary files via the dir parameter (path traversal). Debian/DSA-1423-1 indicates fixes in sitebar 3.3.8-7...