Back to search
CVE-2007-1539
Published: Mar 20, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the module_name parameter, as demonstrated via a static PHP code injection attack in an Apache log file.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
34306
vdb-entry
x_refsource_OSVDB
ADV-2007-1030
vdb-entry
x_refsource_VUPEN
23044
vdb-entry
x_refsource_BID
3521
exploit
x_refsource_EXPLOIT-DB
pragma-mapfunc-file-include(33084)
vdb-entry
x_refsource_XF
24589
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now