Description

Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the core_subdir parameter.

Remediation

References

CVE-2007-2681

Related Vulnerabilities

WordPress Plugin Ooorl Cross-Site Scripting (1.0.0)

WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple SQL Injection Vulnerabilities (1.4.56)

WordPress Plugin How to Create an App for Android iPhone Easytouch Arbitrary File Upload (3.0)

Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61261)

PostgreSQL CVE-2023-39418 Vulnerability (CVE-2023-39418)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2007-2681