← Database

CVE-2007-3096

MEDIUM CVSS: 6.8 Published: 2007-06-06 Modified: 2026-06-16

Description

Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.

Affected Platforms

Pblang Pblang

Weakness Type

NVD-CWE-Other

References