CVE-2007-5694 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 7.6% (pctl 95)
Patch early
A public exploit exists.
Description
Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read arbitrary files via an absolute path in the dir parameter, a different vulnerability than CVE-2007-5491.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:C/I:N/A:N |
| EPSS | 7.56% — more likely to be exploited than 95% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-10-29 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| sitebar | sitebar |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | SiteBar 3.3.8 - 'translator.php?dir' Traversal Arbitrary File Access | 2007-10-18 |
References
- http://osvdb.org/41110
- http://secunia.com/advisories/27503
- http://secunia.com/advisories/28008
- http://securityreason.com/securityalert/3318
- http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup
- http://www.debian.org/security/2007/dsa-1423
- http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml
- http://www.securityfocus.com/archive/1/482499/100/0/threaded
- http://www.securityfocus.com/bid/26126
- http://www.vupen.com/english/advisories/2007/3768
- http://osvdb.org/41110
- http://secunia.com/advisories/27503
- http://secunia.com/advisories/28008
- http://securityreason.com/securityalert/3318
- http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup
- http://www.debian.org/security/2007/dsa-1423
- http://www.gentoo.org/security/en/glsa/glsa-200711-05.xml
- http://www.securityfocus.com/archive/1/482499/100/0/threaded
- http://www.securityfocus.com/bid/26126
- http://www.vupen.com/english/advisories/2007/3768
→ the Explorer · watch your stack · NVD