CVE

Id
25077  
CVE No.
CVE-2007-1720  
Status
Candidate  
Description
Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module_name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file.  
Phase
Assigned (20070327)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249521 25077 CVE-2007-1720 MILW0RM:3582  View
249522 25077 CVE-2007-1720 URL:http://www.milw0rm.com/exploits/3582  View
249523 25077 CVE-2007-1720 BID:23156  View
249524 25077 CVE-2007-1720 URL:http://www.securityfocus.com/bid/23156  View
249525 25077 CVE-2007-1720 VUPEN:ADV-2007-1118  View
249526 25077 CVE-2007-1720 URL:http://www.vupen.com/english/advisories/2007/1118  View
249527 25077 CVE-2007-1720 OSVDB:36572  View
249528 25077 CVE-2007-1720 URL:http://osvdb.org/36572  View
249529 25077 CVE-2007-1720 SECUNIA:24697  View
249530 25077 CVE-2007-1720 URL:http://secunia.com/advisories/24697  View
249531 25077 CVE-2007-1720 XF:addressbook-addressbook-file-include(33243)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56629 JVNDB-2007-005321 SignKorea SKCommAX ActiveX コントロールモジュールの DownloadCertificateExt 関数におけるバッファオーバーフローの脆弱性 SignKorea SKCommAX ActiveX コントロールモジュールの DownloadCertificateExt 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-1722 25077 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005321.html  View