CVE

Id
24829  
CVE No.
CVE-2007-1472  
Status
Candidate  
Description
Variable overwrite vulnerability in groupit/base/groupit.start.inc in Groupit 2.00b5 allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via arguments that are written to $_GLOBALS, as demonstrated using a URL in the c_basepath parameter to (1) content.php, (2) userprofile.php, (3) password.php, (4) dispatch.php, and (5) deliver.php in html/, and possibly (6) load.inc.php and related files.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245955 24829 CVE-2007-1472 BUGTRAQ:20070315 [ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability  View
245956 24829 CVE-2007-1472 URL:http://www.securityfocus.com/archive/1/archive/1/462918/100/0/threaded  View
245957 24829 CVE-2007-1472 MILW0RM:3486  View
245958 24829 CVE-2007-1472 URL:http://www.milw0rm.com/exploits/3486  View
245959 24829 CVE-2007-1472 MISC:http://advisories.echo.or.id/adv/adv75-theday-2007.txt  View
245960 24829 CVE-2007-1472 VIM:20070315 [ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability  View
245961 24829 CVE-2007-1472 URL:http://www.attrition.org/pipermail/vim/2007-March/001435.html  View
245962 24829 CVE-2007-1472 VIM:20070315 [ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability  View
245963 24829 CVE-2007-1472 URL:http://www.attrition.org/pipermail/vim/2007-March/001436.html  View
245964 24829 CVE-2007-1472 VUPEN:ADV-2007-0995  View
245965 24829 CVE-2007-1472 URL:http://www.vupen.com/english/advisories/2007/0995  View
245966 24829 CVE-2007-1472 OSVDB:34476  View
245967 24829 CVE-2007-1472 URL:http://osvdb.org/34476  View
245968 24829 CVE-2007-1472 SREASON:2428  View
245969 24829 CVE-2007-1472 URL:http://securityreason.com/securityalert/2428  View
245970 24829 CVE-2007-1472 XF:groupit-cbasepath-file-include(33000)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54827 JVNDB-2007-003519 Horde Project Horde における任意のファイルを削除される脆弱性 Horde Project Horde、IMP および Horde Application Framework の cleanup cron スクリプトは、引数の挿入により、任意のファイルを削除される、および権限を取得される脆弱性が存在します。 CVE-2007-1474 24829 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003519.html  View