GCVE - cpe:2.3:a:php_turbulence:php_turbulence:0.0.1

Approved changes feed: RSS · Atom

cpe:2.3:a:php_turbulence:php_turbulence:0.0.1_alpha:*:*:*:*:*:*:*

part: a version: 0.0.1_alpha update: *

Vendor	Php Turbulence (`d4ac24a2-ac24-5986-9c18-90764864a4b8`)
Product	Php Turbulence (`d6322e21-b4bc-53bf-a7d7-ee29d87610a4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2503`	vulnerable	2026-06-08 04:49:45.118812	Details available Directory traversal vulnerability in turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[tcore] parameter. NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion Published: 2007-05-04T01:00:00.000Z Updated: 2024-08-07T13:42:33.084Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/2673 http://www.attrition.org/pipermail/vim/2007-April/001541.html http://www.securityfocus.com/bid/23580 https://exchange.xforce.ibmcloud.com/vulnerabilities/33824 http://www.securityfocus.com/archive/1/466564/100/100/threaded	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.