CVE

Id
23524  
CVE No.
CVE-2007-0167  
Status
Candidate  
Description
Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in (1) config_admin.php, (2) config_main.php, (3) config_member.php, and (4) mysql_config.php in config/; (5) admin.php and (6) index.php in admini/; (7) paypalipn/ipnprocess.php; (8) index.php and (9) registration.php in members/; and (10) ppcbannerclick.php and (11) ppcclick.php in main/.  
Phase
Assigned (20070109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
227668 23524 CVE-2007-0167 BUGTRAQ:20070109 ppc engine Multiple file inclusion  View
227669 23524 CVE-2007-0167 URL:http://www.securityfocus.com/archive/1/archive/1/456386/100/0/threaded  View
227670 23524 CVE-2007-0167 MILW0RM:3104  View
227671 23524 CVE-2007-0167 URL:http://milw0rm.com/exploits/3104  View
227672 23524 CVE-2007-0167 VIM:20070109 "ppc engine" is WGS-PPC  View
227673 23524 CVE-2007-0167 URL:http://www.attrition.org/pipermail/vim/2007-January/001221.html  View
227674 23524 CVE-2007-0167 BID:21961  View
227675 23524 CVE-2007-0167 URL:http://www.securityfocus.com/bid/21961  View
227676 23524 CVE-2007-0167 OSVDB:33444  View
227677 23524 CVE-2007-0167 URL:http://www.osvdb.org/33444  View
227678 23524 CVE-2007-0167 OSVDB:33445  View
227679 23524 CVE-2007-0167 URL:http://www.osvdb.org/33445  View
227680 23524 CVE-2007-0167 OSVDB:33446  View
227681 23524 CVE-2007-0167 URL:http://www.osvdb.org/33446  View
227682 23524 CVE-2007-0167 OSVDB:33447  View
227683 23524 CVE-2007-0167 URL:http://www.osvdb.org/33447  View
227684 23524 CVE-2007-0167 OSVDB:33448  View
227685 23524 CVE-2007-0167 URL:http://www.osvdb.org/33448  View
227686 23524 CVE-2007-0167 OSVDB:33449  View
227687 23524 CVE-2007-0167 URL:http://www.osvdb.org/33449  View
227688 23524 CVE-2007-0167 OSVDB:33450  View
227689 23524 CVE-2007-0167 URL:http://www.osvdb.org/33450  View
227690 23524 CVE-2007-0167 OSVDB:33451  View
227691 23524 CVE-2007-0167 URL:http://www.osvdb.org/33451  View
227692 23524 CVE-2007-0167 OSVDB:33452  View
227693 23524 CVE-2007-0167 URL:http://www.osvdb.org/33452  View
227694 23524 CVE-2007-0167 OSVDB:33453  View
227695 23524 CVE-2007-0167 URL:http://www.osvdb.org/33453  View
227696 23524 CVE-2007-0167 OSVDB:33454  View
227697 23524 CVE-2007-0167 URL:http://www.osvdb.org/33454  View
227698 23524 CVE-2007-0167 SREASON:2134  View
227699 23524 CVE-2007-0167 URL:http://securityreason.com/securityalert/2134  View
227700 23524 CVE-2007-0167 XF:demoppc-inc-file-include(31355)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52670 JVNDB-2007-001362 複数の CA 製品におけるバッファオーバーフローの脆弱性 Computer Associates (CA) BrightStor ARCserve Backup、Enterprise Backup および CA Server/Business Protection Suite には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-0169 23524 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001362.html  View