CVE

Id
24188  
CVE No.
CVE-2007-0831  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the CONF[path] parameter to (1) index.php, (2) sources/usercp.php, or (3) sources/admin.php. NOTE: Another researcher has disputed this vulnerability, noting that CONF[path] is defined before use in index.php, that CONF[path] inclusion cannot occur through a direct request to other affected files, and that usercp.php is a typo of user_cp.php.  
Phase
Assigned (20070207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
236818 24188 CVE-2007-0831 BUGTRAQ:20070130 Atsphp 5.0.1 [Top Sites] [index.php] - Remote File Include  View
236819 24188 CVE-2007-0831 URL:http://www.securityfocus.com/archive/1/archive/1/458581/100/100/threaded  View
236820 24188 CVE-2007-0831 BUGTRAQ:20070130 Re: BOGUS: Atsphp 5.0.1 [Top Sites] [index.php] - Remote File Include  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56385 JVNDB-2007-005077 VMware Workstation におけるクリップボードコンテンツを読み取られる脆弱性 VMware Workstation は、"仮想マシンとのコピーおよびペーストが可能" オプションが有効になっている際、ホスト OS 上で既に削除されたクリップボードのデータをゲスト OS 上で維持するため、クリップボードコンテンツを読み取られる脆弱性が存在します。 CVE-2007-0833 24188 1.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005077.html  View