Unscored CVE-2007-1601 EUVD-2007-1595GHSA-5hjh-923j-ff4c

Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .…

Published Mar 22, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows opening files

References

20070313 Re: Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln mailing-list
2453 third-party-advisory
35148 vdb-entry
20070313 Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln mailing-list