VULNERABILITY INTELLIGENCE
CVE-2007-3505
CVSS score6.4 MEDIUM
EPSS probability7.94%
CISA KEVNot currently listed
Published2007-07-02
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) sequence in the lang parameter to (1) qtf_checkname.php, (2) qtf_j_birth.php, or (3) qtf_j_exists.php.