CVE

Id
24409  
CVE No.
CVE-2007-1052  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable third party for 4.65, stating that the dbpath variable is initialized in an included file that is created upon installation.  
Phase
Assigned (20070221)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
240349 24409 CVE-2007-1052 BUGTRAQ:20070216 PBLang 4.60 <= (index.php) Remote File Include Vulnerability  View
240350 24409 CVE-2007-1052 URL:http://www.securityfocus.com/archive/1/archive/1/460315/100/0/threaded  View
240351 24409 CVE-2007-1052 VIM:20070216 PBLang 4.60 <= (index.php) Remote File Include Vulnerability  View
240352 24409 CVE-2007-1052 URL:http://attrition.org/pipermail/vim/2007-February/001356.html  View
240353 24409 CVE-2007-1052 OSVDB:33737  View
240354 24409 CVE-2007-1052 URL:http://osvdb.org/33737  View
240355 24409 CVE-2007-1052 SREASON:2269  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54714 JVNDB-2007-003406 MediaWiki の AJAX 機能におけるクロスサイトスクリプティングの脆弱性 MediaWiki の index.php の AJAX 機能には、$wgUseAjax が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1054 24409 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003406.html  View