CVE

Id
24844  
CVE No.
CVE-2007-1487  
Status
Candidate  
Description
Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter in a showarticles action.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246147 24844 CVE-2007-1487 MILW0RM:3484  View
246148 24844 CVE-2007-1487 URL:http://www.milw0rm.com/exploits/3484  View
246149 24844 CVE-2007-1487 BID:22995  View
246150 24844 CVE-2007-1487 URL:http://www.securityfocus.com/bid/22995  View
246151 24844 CVE-2007-1487 VUPEN:ADV-2007-0967  View
246152 24844 CVE-2007-1487 URL:http://www.vupen.com/english/advisories/2007/0967  View
246153 24844 CVE-2007-1487 OSVDB:34043  View
246154 24844 CVE-2007-1487 URL:http://osvdb.org/34043  View
246155 24844 CVE-2007-1487 SECUNIA:24521  View
246156 24844 CVE-2007-1487 URL:http://secunia.com/advisories/24521  View
246157 24844 CVE-2007-1487 XF:weblog-index-directory-traversal(32998)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56561 JVNDB-2007-005253 web-app.org WebAPP における管理アクセス権限を取得される脆弱性 web-app.org Web Automated Perl Portal (WebAPP) は、クロスサイトリクエストフォージェリの不備があるため、管理アクセス権限を取得される脆弱性が存在します。 CVE-2007-1489 24844 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005253.html  View