Published: 30/11/2007 Updated: 29/09/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the language parameter to (1) languages_n.php, (2) languages_f.php, or (3) languages.php in inc/; and (4) allow remote malicious users to read arbitrary local files via a .. (dot dot) in the uri parameter to frames/nogui/sc_download.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tumusika evolution tumusika evolution 1.7r5

TuMusika Evolution 17R5 Remote File Disclosure Vulnerability Script : sourceforgenet/project/platformdownloadphp?group_id=186000 #################/frames/nogui/sc_downloadphp################# <? $file = $_GET['uri'] ;<---[xxx] $title = $_GET['title'] ; header('HTTP/11 200 OK'); header("content-type:audio/mp3"); header('Content-Dis ...

CWE-22 http://www.securityfocus.com/bid/26631 http://www.securityfocus.com/bid/26632 http://secunia.com/advisories/27866 http://osvdb.org/42450 http://osvdb.org/42452 http://osvdb.org/42453 http://osvdb.org/42451 https://exchange.xforce.ibmcloud.com/vulnerabilities/38720 https://exchange.xforce.ibmcloud.com/vulnerabilities/38719 https://www.exploit-db.com/exploits/4674 https://nvd.nist.gov https://www.exploit-db.com/exploits/4674/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6188

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect