Vulnerability Details CVE-2007-0585
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.112
EPSS Ranking 93.3%
CVSS Severity
CVSS v2 Score 9.3
References
- http://osvdb.org/33015
- http://secunia.com/advisories/23968
- http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLog
- http://www.securityfocus.com/bid/22291
- http://www.vupen.com/english/advisories/2007/0399
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31881
- https://www.exploit-db.com/exploits/3222
- http://osvdb.org/33015
- http://secunia.com/advisories/23968
- http://webfwlog.cvs.sourceforge.net/%2Acheckout%2A/webfwlog/webfwlog/ChangeLog
- http://www.securityfocus.com/bid/22291
- http://www.vupen.com/english/advisories/2007/0399
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31881
- https://www.exploit-db.com/exploits/3222