CVE-2007-0609

Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. (dot dot) in a lang cookie, followed by a filename without its .php extension, as demonstrated via a request to index.php.

• http://secunia.com/advisories/25153Vendor Advisory
• http://securityreason.com/securityalert/2662
• http://www.netvigilance.com/advisory0012Vendor Advisory
• http://www.netvigilance.com/advisory0013Vendor Advisory
• http://www.securityfocus.com/archive/1/467937/100/0/threaded
• http://www.securityfocus.com/archive/1/467941/100/0/threaded
• http://www.securityfocus.com/bid/23876Exploit
• http://www.vupen.com/english/advisories/2007/1726
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34152
• http://secunia.com/advisories/25153Vendor Advisory
• http://securityreason.com/securityalert/2662
• http://www.netvigilance.com/advisory0012Vendor Advisory
• http://www.netvigilance.com/advisory0013Vendor Advisory
• http://www.securityfocus.com/archive/1/467937/100/0/threaded
• http://www.securityfocus.com/archive/1/467941/100/0/threaded
• http://www.securityfocus.com/bid/23876Exploit
• http://www.vupen.com/english/advisories/2007/1726
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34152

Published

May 9, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0603PGP Desktop before 9.5.1 does not validate data objects rece…
• CVE-2007-0604Cross-site scripting (XSS) vulnerability in Movable Type (MT…
• CVE-2007-0605Cross-site scripting (XSS) vulnerability in picture.php in A…
• CVE-2007-0606w-agora 4.2.1 allows remote attackers to obtain sensitive in…
• CVE-2007-0607W-Agora (Web-Agora) 4.2.1, when register_globals is enabled,…
• CVE-2007-0608Advanced Guestbook 2.4.2 allows remote attackers to obtain s…
• CVE-2007-0610Cross-site scripting (XSS) vulnerability in the mailform fea…
• CVE-2007-0611Multiple cross-site scripting (XSS) vulnerabilities in Free …
• CVE-2007-0612Multiple ActiveX controls in Microsoft Windows 2000, XP, 200…
• CVE-2007-0613The Bonjour functionality in mDNSResponder, iChat 3.1.6, and…
• CVE-2007-0614The Bonjour functionality in mDNSResponder, iChat 3.1.6, and…
• CVE-2007-0615Unspecified vulnerability in Hitachi JP1/HIBUN Advanced Edit…