CVE

Id
24057  
CVE No.
CVE-2007-0700  
Status
Candidate  
Description
Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. NOTE: this issue was later reported for 2.5.1.1.  
Phase
Assigned (20070203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
234550 24057 CVE-2007-0700 BUGTRAQ:20070201 php web portail [remote file include & local file include]  View
234551 24057 CVE-2007-0700 URL:http://www.securityfocus.com/archive/1/archive/1/458805/100/0/threaded  View
234552 24057 CVE-2007-0700 MILW0RM:5182  View
234553 24057 CVE-2007-0700 URL:http://www.milw0rm.com/exploits/5182  View
234554 24057 CVE-2007-0700 VIM:20070201 Fwd: php web portail [remote file include & local file include]  View
234555 24057 CVE-2007-0700 URL:http://www.attrition.org/pipermail/vim/2007-February/001269.html  View
234556 24057 CVE-2007-0700 VIM:20070202 Local File Inclusion inconclusive in PwP (was Fwd: php web portail [remote file include & local fileinclude])  View
234557 24057 CVE-2007-0700 URL:http://www.attrition.org/pipermail/vim/2007-February/001280.html  View
234558 24057 CVE-2007-0700 VIM:20070202 Local File Inclusion inconclusive in PwP (was Fwd: php web portail [remote file include & local fileinclude])  View
234559 24057 CVE-2007-0700 URL:http://www.attrition.org/pipermail/vim/2007-February/001281.html  View
234560 24057 CVE-2007-0700 BID:22361  View
234561 24057 CVE-2007-0700 URL:http://www.securityfocus.com/bid/22361  View
234562 24057 CVE-2007-0700 BID:27962  View
234563 24057 CVE-2007-0700 URL:http://www.securityfocus.com/bid/27962  View
234564 24057 CVE-2007-0700 OSVDB:33634  View
234565 24057 CVE-2007-0700 URL:http://osvdb.org/33634  View
234566 24057 CVE-2007-0700 XF:portailwebphp-index-file-include(32115)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56364 JVNDB-2007-005056 phpEventMan における PHP リモートファイルインクルージョンの脆弱性 phpEventMan には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-0702 24057 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005056.html  View