CVE-2007-0337

{"id": "CVE-2007-0337", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-01-18T02:28:00.000", "references": [{"url": "http://osvdb.org/31585", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23768", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22065", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0228", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31508", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/3134", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/31585", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/23768", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/22065", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/0228", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31508", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/3134", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a file in the kg directory, and then included by sesskglogadmin.php."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en sesskglogadmin.php en KGB 1.9 y anteriores permite a un atacante remoto incluir y ejecutar ficheros locales de su elecci\u00f3n a trav\u00e9s de la secuencia ..(punto punto) en el par\u00e1metro skinn, como se demostr\u00f3 invocando kg.php con un par\u00e1metro postek que contenga c\u00f3digo PHP, el cual es inyectado dentro de un archivo en el directorio kg, y entonces incluye el sesskglogadmin.php."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kgb:kgb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DEE53CF-804F-4690-B54E-2317FE6A68DB", "versionEndIncluding": "1.9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}