CVE-2007-3547

Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/07/2007 Updated: 29/09/2017

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Directory traversal vulnerability in qti_checkname.php in QuickTicket 1.2 allows remote malicious users to include and execute arbitrary local files a .. (dot dot) in the lang parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qt-cute quickticket 1.2

###QuickTicket v12 Local File Inclusion### #download: wwwqt-cuteorg/download/qti12zip #found by: katatafish (karatatata@hushcom) #vulncode: $strLang = $_GET["lang"]; include("language/$strLang/qtf_lang_reginc"); #exploit: wwwsitecom/[path]/qti_checknamephp?lang=///////////etc/passwd%00 #thanks:str ...

NVD-CWE-Other http://www.securityfocus.com/bid/24670 http://secunia.com/advisories/25852/http://osvdb.org/37605 https://exchange.xforce.ibmcloud.com/vulnerabilities/35115 https://www.exploit-db.com/exploits/4116 https://nvd.nist.gov https://www.exploit-db.com/exploits/4116/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-3547

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect