CyberSec.Space Logo
Back to CVE Browser

CVE-2007-1076

HIGH
7.5
CVSS Severity Score
EPSS Score0.0480%
EPSS Percentile32.37th
PublishedFeb 22, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to include arbitrary local files via a .. (dot dot) in the (1) file parameter to plotStat.php and the (2) lang parameter to banref.php.

Affected Platforms (CPE)

📦
Phptraffica

Phptraffica

= 1.4.1

References & Advisories

🔗 http://attrition.org/pipermail/vim/2007-February/001377.html
🔗 http://osvdb.org/33373
🔗 http://osvdb.org/33374
🔗 http://secunia.com/advisories/24242
🔗 http://soft.zoneo.net/phpTrafficA/news.php
🔗 http://www.bugtraq.ir/articles/file-inclusion/phpTrafficA-1.4.1-Local-File-Inclusion/1
🔗 http://www.securityfocus.com/bid/22655
🔗 http://www.vupen.com/english/advisories/2007/0709

Related Vulnerabilities

CVE-2007-364710.0

The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and...

CVE-2014-83407.5

SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to execute ar...

CVE-2007-34277.5

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL command...

CVE-2007-34287.5

Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via the file par...