CVE

Id
23546  
CVE No.
CVE-2007-0189  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in GeoBB Georgian Bulletin Board allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. NOTE: CVE disputes this issue, since GeoBB 1.0 sets $action to a whitelisted value.  
Phase
Assigned (20070110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
228032 23546 CVE-2007-0189 BUGTRAQ:20070107 GeoBB Georgian Bulletin Board Remote File Include Vuln.  View
228033 23546 CVE-2007-0189 URL:http://www.securityfocus.com/archive/1/archive/1/456251/100/0/threaded  View
228034 23546 CVE-2007-0189 VIM:20070110 Dispute of GeoBB RFI  View
228035 23546 CVE-2007-0189 URL:http://www.attrition.org/pipermail/vim/2007-January/001230.html  View
228036 23546 CVE-2007-0189 OSVDB:33440  View
228037 23546 CVE-2007-0189 URL:http://osvdb.org/33440  View
228038 23546 CVE-2007-0189 SREASON:2141  View
228039 23546 CVE-2007-0189 URL:http://securityreason.com/securityalert/2141  View
228040 23546 CVE-2007-0189 XF:geobb-index-file-include(31335)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54510 JVNDB-2007-003202 MKPortal の admin.php におけるクロスサイトスクリプティングの脆弱性 MKPortal の admin.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-0191 23546 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003202.html  View