CVE

Id
21541  
CVE No.
CVE-2006-5437  
Status
Candidate  
Description
** DISPUTED ** Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the phpAds_config[language] parameter. NOTE: this issue could not be reproduced by a third party.  
Phase
Assigned (20061020)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205539 21541 CVE-2006-5437 BUGTRAQ:20061017 phpAdsNew include bug!  View
205540 21541 CVE-2006-5437 URL:http://www.securityfocus.com/archive/1/archive/1/448994/100/0/threaded  View
205541 21541 CVE-2006-5437 BUGTRAQ:20061018 Re: phpAdsNew include bug!  View
205542 21541 CVE-2006-5437 URL:http://www.securityfocus.com/archive/1/archive/1/449084/100/0/threaded  View
205543 21541 CVE-2006-5437 XF:phpadsnew-upgrade-file-include(29640)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59146 JVNDB-2006-001412 Comdev Misc Tools の adminfoot.php における PHP リモートファイルインクルージョンの脆弱性 Comdev Misc Tools の adminfoot.php は、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-5439 21541 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001412.html  View