CVE

Id
23407  
CVE No.
CVE-2007-0050  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests that there is a small time window of risk before the installation is complete.  
Phase
Assigned (20070103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
226189 23407 CVE-2007-0050 BUGTRAQ:20070103 OpenPinboard <= Remote File Include  View
226190 23407 CVE-2007-0050 URL:http://www.securityfocus.com/archive/1/archive/1/455795/100/0/threaded  View
226191 23407 CVE-2007-0050 BUGTRAQ:20070103 Re: OpenPinboard <= Remote File Include  View
226192 23407 CVE-2007-0050 URL:http://www.securityfocus.com/archive/1/455818/100/0/threaded  View
226193 23407 CVE-2007-0050 BUGTRAQ:20070106 Re: OpenPinboard <= Remote File Include  View
226194 23407 CVE-2007-0050 URL:http://archives.neohapsis.com/archives/bugtraq/2007-01/0176.html  View
226195 23407 CVE-2007-0050 OSVDB:33375  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56213 JVNDB-2007-004905 Vizayn Haber の haberdetay.asp における SQL インジェクションの脆弱性 Vizayn Haber の haberdetay.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2007-0052 23407 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004905.html  View