CVE

Id
24988  
CVE No.
CVE-2007-1631  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use.  
Phase
Assigned (20070323)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
248068 24988 CVE-2007-1631 BUGTRAQ:20070317 CLBOX <= (signup.php header) Remote File Include Vulnerability  View
248069 24988 CVE-2007-1631 URL:http://www.securityfocus.com/archive/1/archive/1/463076/100/0/threaded  View
248070 24988 CVE-2007-1631 VIM:20070319 Bogus - [CLBOX <= (signup.php header) Remote File Include Vulnerability]  View
248071 24988 CVE-2007-1631 URL:http://www.attrition.org/pipermail/vim/2007-March/001443.html  View
248072 24988 CVE-2007-1631 OSVDB:33503  View
248073 24988 CVE-2007-1631 URL:http://www.osvdb.org/33503  View
248074 24988 CVE-2007-1631 SREASON:2469  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53041 JVNDB-2007-001733 PHP-Nuke の Giorgio Ciranni Splatt Forum モジュールにおけるディレクトリトラバーサルの脆弱性 PHP-Nuke の Giorgio Ciranni Splatt Forum モジュールの bbcode_ref.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-1633 24988 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001733.html  View