CVE-2007-6378

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .

published December 15, 2007

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03205 · 88.1th percentile
Published
2007-12-15T01:00Z
EPSS history
Timeline
  • 15 DEC 01:00Z
    Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .
    cvelistv5