CVE-2007-6129 - Vulnerability Details - OpenCVE

Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.07831.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

n/a

affected

Version	Status	Constraints
`n/a`	affected	—

Configuration 1 [-]

cpe:2.3:a:amber_script:amber_script:1.0:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors	Products
Amber Script Subscribe	Amber Script Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2007-6098	Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/38814
http://secunia.com/advisories/27815
http://www.securityfocus.com/archive/1/484154/100/0/threaded
http://www.securityfocus.com/bid/26561
http://www.vupen.com/english/advisories/2007/3993
https://exchange.xforce.ibmcloud.com/vulnerabilities/38617
https://www.exploit-db.com/exploits/4652

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-11-27T03:00:00.000Z

Updated: 2024-08-07T15:54:27.074Z

Reserved: 2007-11-26T05:00:00.000Z

Link: CVE-2007-6129

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-11-26T22:46:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-6129

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-20

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-11-24T05:00:00.000Z", "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T00:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "4652", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/4652"}, {"name": "20071124 Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/484154/100/0/threaded"}, {"name": "27815", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27815"}, {"name": "38814", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/38814"}, {"name": "amberscript-showcontent-file-include(38617)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38617"}, {"name": "ADV-2007-3993", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3993"}, {"name": "26561", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26561"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-6129", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "4652", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/4652"}, {"name": "20071124 Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/484154/100/0/threaded"}, {"name": "27815", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27815"}, {"name": "38814", "refsource": "OSVDB", "url": "http://osvdb.org/38814"}, {"name": "amberscript-showcontent-file-include(38617)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38617"}, {"name": "ADV-2007-3993", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3993"}, {"name": "26561", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26561"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:54:27.074Z"}, "title": "CVE Program Container", "references": [{"name": "4652", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/4652"}, {"name": "20071124 Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/484154/100/0/threaded"}, {"name": "27815", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27815"}, {"name": "38814", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/38814"}, {"name": "amberscript-showcontent-file-include(38617)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38617"}, {"name": "ADV-2007-3993", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3993"}, {"name": "26561", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/26561"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-6129", "datePublished": "2007-11-27T03:00:00.000Z", "dateReserved": "2007-11-26T05:00:00.000Z", "dateUpdated": "2024-08-07T15:54:27.074Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:amber_script:amber_script:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "342CDEF2-37D2-462F-8AB5-16B6A7D5600E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL."}, {"lang": "es", "value": "Una vulnerabilidad de salto de directorio en el archivo scripts/include/show_content.php en Amber Script versi\u00f3n 1.0, permite a atacantes remotos incluir y ejecutar archivos locales arbitrarios por medio de un .. (punto punto) en el par\u00e1metro id. NOTA: en algunos entornos, esto puede ser aprovechado para la inclusi\u00f3n de archivos remota mediante el uso de un nombre de ruta compartido UNC o una URL ftp, ftps o ssh2.sftp."}], "evaluatorImpact": "Successful exploitation requires that \"magic_quotes_gpc\" is disabled.", "id": "CVE-2007-6129", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-11-26T22:46:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/38814"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/27815"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/484154/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/26561"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/3993"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38617"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/4652"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/38814"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/27815"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/484154/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/26561"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/3993"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38617"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/4652"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}