Description
Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the languagepack parameter to (1) jax_petitionbook.php or (2) smileys.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Jax Petition Book 3.06 - 'jax_petitionbook.php?languagepack' Local File Inclusion EDB-29468 · webapps · Jan 15, 2007 · verified
- Jax Petition 3.06 Book - 'smileys.php?languagepack' Local File Inclusion EDB-29469 · webapps · Jan 15, 2007 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 23784 third-party-advisory
- 20070116 Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities mailing-list
- 20070114 Jax Petition Book (languagepack) Remote File Include Vulnerabilities mailing-list
- 32835 vdb-entry
- petitionbook-language-file-include(31543) vdb-entry
- 2161 third-party-advisory
- 22072 vdb-entry
- ADV-2007-0220 vdb-entry
- 20070115 Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities mailing-list
- 32836 vdb-entry