~/products/instaguide/weather

pipeline liveDigest Docs

Instaguide Weather vulnerabilities

1 known vulnerability affecting instaguide/weather.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2007-5674P3MEDIUMCVSS 6.8PoCv1.02007-10-24

CVE-2007-5674 [MEDIUM] CWE-22 CVE-2007-5674: Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when Directory traversal vulnerability in index.php in InstaGuide Weather (aka Weather for PHP) 1.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PageName parameter.