CVE

Id
23843  
CVE No.
CVE-2007-0486  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Openads (aka phpAdsNew) 2.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) phpAds_geoPlugin parameter to libraries/lib-remotehost.inc, the (2) filename parameter to admin/report-index, or the (3) phpAds_config[my_footer] parameter to admin/lib-gui.inc. NOTE: the vendor has disputed this issue, stating that the relevant variables are used within function definitions.  
Phase
Assigned (20070124)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
232143 23843 CVE-2007-0486 BUGTRAQ:20070120 phpAdsNew 2.0.7 Remote File Include  View
232144 23843 CVE-2007-0486 URL:http://www.securityfocus.com/archive/1/archive/1/457670/100/0/threaded  View
232145 23843 CVE-2007-0486 BUGTRAQ:20070122 Re: phpAdsNew 2.0.7 Remote File Include  View
232146 23843 CVE-2007-0486 URL:http://www.securityfocus.com/archive/1/archive/1/457806/100/200/threaded  View
232147 23843 CVE-2007-0486 BUGTRAQ:20070124 Re: phpAdsNew 2.0.7 Remote File Include  View
232148 23843 CVE-2007-0486 URL:http://www.securityfocus.com/archive/1/archive/1/457991/100/200/threaded  View
232149 23843 CVE-2007-0486 BID:22172  View
232150 23843 CVE-2007-0486 URL:http://www.securityfocus.com/bid/22172  View
232151 23843 CVE-2007-0486 OSVDB:33573  View
232152 23843 CVE-2007-0486 URL:http://osvdb.org/33573  View
232153 23843 CVE-2007-0486 SREASON:2174  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54573 JVNDB-2007-003265 Quidway R1600 Router におけるサービス運用妨害 (DoS) の脆弱性 Quidway R1600 Router の Huawei の Versatile Routing Platform には、サービス運用妨害 (デバイスクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-0488 23843 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003265.html  View