CVE

Id
23887  
CVE No.
CVE-2007-0530  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Advanced Guestbook 2.4.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) index.php, (2) addentry.php, or (3) picture.php, a different set of vectors than CVE-2006-5804. NOTE: this issue has been disputed by third party researchers, stating that the include_path variable is instantiated before use.  
Phase
Assigned (20070125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
232724 23887 CVE-2007-0530 BUGTRAQ:20070123 Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability  View
232725 23887 CVE-2007-0530 URL:http://www.securityfocus.com/archive/1/archive/1/457870/100/0/threaded  View
232726 23887 CVE-2007-0530 BUGTRAQ:20070123 Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56319 JVNDB-2007-005011 Tuan Do Uploader における管理者パスワードハッシュを取得される脆弱性 Tuan Do Uploader は、不十分なアクセスコントロールを伴う Web ルート配下に重要な情報を格納するため、管理者パスワードハッシュを取得される脆弱性が存在します。 CVE-2007-0532 23887 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005011.html  View