CVE

Id
23183  
CVE No.
CVE-2006-7079  
Status
Candidate  
Description
Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption["pagetype"] variable.  
Phase
Assigned (20070227)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
223364 23183 CVE-2006-7079 MILW0RM:2415  View
223365 23183 CVE-2006-7079 URL:http://www.milw0rm.com/exploits/2415  View
223366 23183 CVE-2006-7079 BID:20161  View
223367 23183 CVE-2006-7079 URL:http://www.securityfocus.com/bid/20161  View
223368 23183 CVE-2006-7079 XF:exv2-commmon-command-execute(29116)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56174 JVNDB-2007-004866 PhpNews における PHP リモートファイルインクルージョンの脆弱性 PhpNews には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-7081 23183 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004866.html  View