CVE

Id
25065  
CVE No.
CVE-2007-1708  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.  
Phase
Assigned (20070326)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249288 25065 CVE-2007-1708 MILW0RM:3563  View
249289 25065 CVE-2007-1708 URL:http://www.milw0rm.com/exploits/3563  View
249290 25065 CVE-2007-1708 BID:23139  View
249291 25065 CVE-2007-1708 URL:http://www.securityfocus.com/bid/23139  View
249292 25065 CVE-2007-1708 VUPEN:ADV-2007-1102  View
249293 25065 CVE-2007-1708 URL:http://www.vupen.com/english/advisories/2007/1102  View
249294 25065 CVE-2007-1708 OSVDB:37198  View
249295 25065 CVE-2007-1708 URL:http://osvdb.org/37198  View
249296 25065 CVE-2007-1708 XF:ttcms-ezsql-file-include(33202)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54903 JVNDB-2007-003595 PHP の readfile 関数における safe_mode 制限を回避される脆弱性 PHP の readfile 関数には、safe_mode 関数を回避される、および任意のファイルを読まれる脆弱性が存在します。 CVE-2007-1710 25065 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003595.html  View