Vulnerabilities (CVE)

Filtered by vendor Webfwlog Subscribe
Filtered by product Webfwlog
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-0585 1 Webfwlog 1 Webfwlog 2024-02-28 9.3 HIGH N/A
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks.