CVE		CVE-2007-0098
Status		Candidate
Description		Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.
Severity		Medium
CVSS score		5,6
CVSS vector		(AV:R/AC:H/Au:NR/C:P/I:P/A:P/B:N)
Phase		Assigned (05.01.2007)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-0098
References		FRSIRT : ADV-2007-0035
		MILW0RM : 3075
		XF : verliadmin-language-file-include(31241)
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)