CVE-2007-1487

Published: Mar 16, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a showarticles action.

Affected (3)

Products: Cyber Inside: Weblog · Cyberteddy: Weblog · Sascha Schroeder: Weblog

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cyber Inside Weblog	All versions
Cyberteddy Weblog	All versions
Sascha Schroeder Weblog	All versions

References (12)

http://osvdb.org/34043

Source: cve@mitre.org

http://secunia.com/advisories/24521

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/22995

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0967

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/32998

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3484

Source: cve@mitre.org

http://osvdb.org/34043