← Database

CVE-2007-1601

MEDIUM CVSS: 5.0 Published: 2007-03-22 Modified: 2026-06-16

Description

Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows opening files

Affected Platforms

Weekly Drawing Contest Weekly Drawing Contest

Weakness Type

NVD-CWE-Other

References