Directory traversal vulnerability in turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tcore] parameter. NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-05-04T01:00:00
Updated: 2024-08-07T13:42:33.084Z
Reserved: 2007-05-03T00:00:00
Link: CVE-2007-2503
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-05-04T01:19:00.000
Modified: 2024-11-21T00:30:56.910
Link: CVE-2007-2503
Redhat
No data.