CVEvulnerability
CVE-2007-5491
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang parameter.
Affected configurations
• sitebar sitebar 3.3.8
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/27503 secunia.com
- http://secunia.com/advisories/28008 secunia.com
- http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup teamforge.net
- http://www.debian.org/security/2007/dsa-1423 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml www.gentoo.org
- http://www.securityfocus.com/bid/26126 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3768 www.vupen.com
- https://bugs.gentoo.org/show_bug.cgi?id=195810 bugs.gentoo.org
- http://secunia.com/advisories/27503 secunia.com
- http://secunia.com/advisories/28008 secunia.com
- http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup teamforge.net
- http://www.debian.org/security/2007/dsa-1423 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml www.gentoo.org
- http://www.securityfocus.com/bid/26126 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3768 www.vupen.com
- https://bugs.gentoo.org/show_bug.cgi?id=195810 bugs.gentoo.org