CVE

Id
24834  
CVE No.
CVE-2007-1477  
Status
Candidate  
Description
** DISPUTED ** Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg_language parameter. NOTE: this issue has been disputed by CVE, since the cfg_language variable is configured upon proper product installation.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246040 24834 CVE-2007-1477 BUGTRAQ:20070312 PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln  View
246041 24834 CVE-2007-1477 URL:http://www.securityfocus.com/archive/1/archive/1/462970/100/0/threaded  View
246042 24834 CVE-2007-1477 VIM:20070427 FALSE -> PHP Point of Sale (osCommerce) LFI  View
246043 24834 CVE-2007-1477 URL:http://attrition.org/pipermail/vim/2007-April/001564.html  View
246044 24834 CVE-2007-1477 SREASON:2426  View
246045 24834 CVE-2007-1477 URL:http://securityreason.com/securityalert/2426  View
246046 24834 CVE-2007-1477 XF:pos-index-file-include(33006)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53012 JVNDB-2007-001704 Creative Guestbook の Guestbook.php におけるクロスサイトスクリプティングの脆弱性 Creative Guestbook の Guestbook.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1479 24834 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001704.html  View