CVE-2007-5821

MEDIUM 6.8CVE-2007-5821 · Published 05/11/2007 · updated 16/06/2026

In short

CVE-2007-5821 is a MEDIUM (CVSS 6.8) vulnerability affecting dm guestbook (dm guestbook).
Chance of exploitation in the next 30 days (EPSS): 5.5%, higher than 92.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dm guestbook dm_guestbook	`≤ 0.4.1`	No fix yet

Description

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lng parameter to (a) guestbook.php, (b) admin/admin.guestbook.php, or (c) auto/glob_new.php; or (2) the lngdefault parameter to auto/ch_lng.php.

References

osvdb.org/39064
osvdb.org/39065
osvdb.org/39066
osvdb.org/39067
securityfocus.com/bid/26300
vupen.com/english/advisories/2007/3747
exchange.xforce.ibmcloud.com/vulnerabilities/38219
exploit-db.com/exploits/4597

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free