CVE

Id
23530  
CVE No.
CVE-2007-0173  
Status
Candidate  
Description
Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when register_globals is enabled and magic_quotes is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.  
Phase
Assigned (20070110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
227785 23530 CVE-2007-0173 MILW0RM:3091  View
227786 23530 CVE-2007-0173 URL:http://milw0rm.com/exploits/3091  View
227787 23530 CVE-2007-0173 BID:21914  View
227788 23530 CVE-2007-0173 URL:http://www.securityfocus.com/bid/21914  View
227789 23530 CVE-2007-0173 VUPEN:ADV-2007-0097  View
227790 23530 CVE-2007-0173 URL:http://www.vupen.com/english/advisories/2007/0097  View
227791 23530 CVE-2007-0173 OSVDB:35914  View
227792 23530 CVE-2007-0173 URL:http://osvdb.org/35914  View
227793 23530 CVE-2007-0173 XF:l2j-statistik-index-file-include(31309)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52672 JVNDB-2007-001364 b2evolution の htsrv/login.php におけるクロスサイトスクリプティングの脆弱性 b2evolution の htsrv/login.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0175 23530 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001364.html  View