CVE-2007-2681: High severity b2evolution b2evolution vulnerability
Published May 15, 2007
·Updated
Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the coresubdir parameter.
Affected Software
1 affected component
b2evolution b2evolution=1.6
Event History
May 15, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2681?
CVE-2007-2681 has a high severity level due to its potential for remote file inclusion and arbitrary code execution.
2
How do I fix CVE-2007-2681?
To fix CVE-2007-2681, update b2evolution to the latest version that addresses this directory traversal vulnerability.
3
What systems are affected by CVE-2007-2681?
CVE-2007-2681 specifically affects b2evolution version 1.6.
4
What kind of attacks can exploit CVE-2007-2681?
Attackers can exploit CVE-2007-2681 to include and execute arbitrary local files on the server.
5
Is CVE-2007-2681 easy to exploit?
Yes, CVE-2007-2681 is considered relatively easy to exploit because it relies on a simple directory traversal attack.