CVE

Id
23617  
CVE No.
CVE-2007-0260  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the this_path parameter. NOTE: a reliable third party disputes this vulnerability because this_path is defined before use.  
Phase
Assigned (20070116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
229216 23617 CVE-2007-0260 BUGTRAQ:20070112 Naig <= 0.5.2 (this_path) Remote File Include Vulnerability  View
229217 23617 CVE-2007-0260 URL:http://www.securityfocus.com/archive/1/archive/1/456744/100/0/threaded  View
229218 23617 CVE-2007-0260 BUGTRAQ:20070113 Re: Naig <= 0.5.2 (this_path) Remote File Include Vulnerability  View
229219 23617 CVE-2007-0260 URL:http://www.securityfocus.com/archive/1/archive/1/456785/100/0/threaded  View
229220 23617 CVE-2007-0260 VIM:20070112 Fwd: Naig <= 0.5.2 (this_path) Remote File Include Vulnerability  View
229221 23617 CVE-2007-0260 URL:http://www.attrition.org/pipermail/vim/2007-January/001239.html  View
229222 23617 CVE-2007-0260 OSVDB:33472  View
229223 23617 CVE-2007-0260 URL:http://osvdb.org/33472  View
229224 23617 CVE-2007-0260 SREASON:2145  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56258 JVNDB-2007-004950 WordPress における重要な情報を取得される脆弱性 WordPress は、m パラメータ値が文字列データタイプであることを適切に検証しないため、重要な情報を取得される脆弱性が存在します。 CVE-2007-0262 23617 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004950.html  View