CVE

Id
23557  
CVE No.
CVE-2007-0200  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6 allows remote attackers to execute arbitrary PHP code via a URL in the baseAxiomPath parameter.  
Phase
Assigned (20070110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
228138 23557 CVE-2007-0200 MILW0RM:3108  View
228139 23557 CVE-2007-0200 URL:http://milw0rm.com/exploits/3108  View
228140 23557 CVE-2007-0200 VIM:20070110 source verify - Axiom RFI  View
228141 23557 CVE-2007-0200 URL:http://www.attrition.org/pipermail/vim/2007-January/001233.html  View
228142 23557 CVE-2007-0200 BID:21972  View
228143 23557 CVE-2007-0200 URL:http://www.securityfocus.com/bid/21972  View
228144 23557 CVE-2007-0200 VUPEN:ADV-2007-0107  View
228145 23557 CVE-2007-0200 URL:http://www.vupen.com/english/advisories/2007/0107  View
228146 23557 CVE-2007-0200 OSVDB:32716  View
228147 23557 CVE-2007-0200 URL:http://osvdb.org/32716  View
228148 23557 CVE-2007-0200 SECUNIA:23715  View
228149 23557 CVE-2007-0200 URL:http://secunia.com/advisories/23715  View
228150 23557 CVE-2007-0200 XF:axiom-template-file-include(31372)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52685 JVNDB-2007-001377 @lex Guestbook の index.php における SQL インジェクションの脆弱性 @lex Guestbook の index.php には、magic_quotes_gpc が有効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2007-0202 23557 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001377.html  View