National Cyber Awareness System

Vulnerability Summary for CVE-2007-5299

Overview

Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. (dot dot) in the view_mode parameter to (1) featured_list.php and (2) online_list.php in member/.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2007-3432

Hyperlink:http://www.vupen.com/english/advisories/2007/3432

External Source: MILW0RM

Name: 4493

Hyperlink:http://www.milw0rm.com/exploits/4493

External Source: SECUNIA

Name: 27114

Type: Advisory

Hyperlink:http://secunia.com/advisories/27114

External Source: OSVDB

Name: 38457

Hyperlink:http://osvdb.org/38457

External Source: OSVDB

Name: 38456

Hyperlink:http://osvdb.org/38456

External Source: XF

Name: skadate-featuredlist-directory-traversal(37001)

Hyperlink:http://xforce.iss.net/xforce/xfdb/37001

External Source: BID

Name: 25954

Hyperlink:http://www.securityfocus.com/bid/25954