CVE

Id
24816  
CVE No.
CVE-2007-1459  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the moddir parameter to (1) content/load.inc.php, (2) config/load.inc.php, (3) http/load.inc.php, and unspecified other files.  
Phase
Assigned (20070314)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245738 24816 CVE-2007-1459 BUGTRAQ:20070314 [ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability  View
245739 24816 CVE-2007-1459 URL:http://www.securityfocus.com/archive/1/archive/1/462809/100/0/threaded  View
245740 24816 CVE-2007-1459 MILW0RM:3473  View
245741 24816 CVE-2007-1459 URL:http://www.milw0rm.com/exploits/3473  View
245742 24816 CVE-2007-1459 MISC:http://advisories.echo.or.id/adv/adv74-theday-2007.txt  View
245743 24816 CVE-2007-1459 BID:22953  View
245744 24816 CVE-2007-1459 URL:http://www.securityfocus.com/bid/22953  View
245745 24816 CVE-2007-1459 VUPEN:ADV-2007-0937  View
245746 24816 CVE-2007-1459 URL:http://www.vupen.com/english/advisories/2007/0937  View
245747 24816 CVE-2007-1459 XF:webcreator-loadinc-file-include(32972)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51681 JVNDB-2007-000344 PHP の bzip2:// ラッパーにおける safe_mode/open_basedir 制限回避の脆弱性 PHP の bz2 拡張モジュールで定義される bzip2:// ラッパーは、safe_mode および open_basedir のチェックを行わない問題があります。 CVE-2007-1461 24816 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000344.html  View