CVE

Id
24812  
CVE No.
CVE-2007-1455  
Status
Candidate  
Description
Multiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow remote authenticated users to include and execute arbitrary local files via (1) the userlanguage parameter to includes/load_language.php or (2) the fantasticopath parameter to includes/mysqlconfig.php and certain other files.  
Phase
Assigned (20070314)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245672 24812 CVE-2007-1455 BUGTRAQ:20070311 Fantastico In all Version Cpanel 10.x <= local File Include  View
245673 24812 CVE-2007-1455 URL:http://www.securityfocus.com/archive/1/archive/1/462562/100/0/threaded  View
245674 24812 CVE-2007-1455 OSVDB:35036  View
245675 24812 CVE-2007-1455 URL:http://osvdb.org/35036  View
245676 24812 CVE-2007-1455 OSVDB:35037  View
245677 24812 CVE-2007-1455 URL:http://osvdb.org/35037  View
245678 24812 CVE-2007-1455 SREASON:2420  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53007 JVNDB-2007-001699 Christian Scheurer unrarlib の urarlib_get 関数におけるバッファオーバーフローの脆弱性 Christian Scheurer UniquE RAR File Library (unrarlib) の urarlib_get 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-1457 24812 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001699.html  View