CVE-2007-1126

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-1126
Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (dot dot) in the template parameter.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.securityfocus.com/bid/22698 Third Party Advisory VDB Entry
http://secunia.com/advisories/24301 Broken Link
http://securityreason.com/securityalert/2294 Third Party Advisory
http://osvdb.org/33758 Broken Link
http://www.vupen.com/english/advisories/2007/0746 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/32656 VDB Entry
http://www.securityfocus.com/archive/1/461073/100/0/threaded Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:xt-commerce:xt-commerce:2.0:rc1.2:*:*:*:*:*:*
cpe:2.3:a:xt-commerce:xt-commerce:*:*:*:*:*:*:*:*
History

19 Mar 2024, 17:46

Type Values Removed Values Added
CPE cpe:2.3:a:xt-commerce:xt-commerce_community_made_shopping:*:rc_1.2:*:*:*:*:*:* cpe:2.3:a:xt-commerce:xt-commerce:*:*:*:*:*:*:*:*
cpe:2.3:a:xt-commerce:xt-commerce:2.0:rc1.2:*:*:*:*:*:*
CWE NVD-CWE-Other CWE-22
References (SECUNIA) http://secunia.com/advisories/24301 - (SECUNIA) http://secunia.com/advisories/24301 - Broken Link
References (VUPEN) http://www.vupen.com/english/advisories/2007/0746 - (VUPEN) http://www.vupen.com/english/advisories/2007/0746 - Broken Link
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/32656 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/32656 - VDB Entry
References (SREASON) http://securityreason.com/securityalert/2294 - (SREASON) http://securityreason.com/securityalert/2294 - Third Party Advisory
References (BUGTRAQ) http://www.securityfocus.com/archive/1/461073/100/0/threaded - (BUGTRAQ) http://www.securityfocus.com/archive/1/461073/100/0/threaded - Third Party Advisory, VDB Entry
References (OSVDB) http://osvdb.org/33758 - (OSVDB) http://osvdb.org/33758 - Broken Link
References (BID) http://www.securityfocus.com/bid/22698 - (BID) http://www.securityfocus.com/bid/22698 - Third Party Advisory, VDB Entry
First Time Xt-commerce xt-commerce
Information

Published : 2007-02-27 02:28

Updated : 2024-03-19 17:46

NVD link : CVE-2007-1126

Mitre link : CVE-2007-1126

JSON object : View

Products Affected

xt-commerce

  • xt-commerce
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')