CVE-2007-5674

CVE-2007-5674 describes a directory traversal vulnerability in InstaGuide Weather 1.0, specifically within its index.php file. When the magic_quotes_gpc setting is disabled, remote attackers can exploit this flaw by manipulating the PageName parameter with dot-dot-slash sequences to include and execute arbitrary local files. This vulnerability carries a CVSS score of 6.8, indicating a medium severity with a network attack vector, medium attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While not listed on CISA's KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.