Description
Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _path parameter.
Unscored
CVE-2007-5103
EUVD-2007-5084GHSA-fff3-c2m4-3vrp
Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to incl…
Published Sep 26, 2007 · Updated Aug 7, 2024 · Assigned by mitre