CVE

Id
25281  
CVE No.
CVE-2007-1924  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) contact_business.php or (2) contact_person.php. NOTE: this issue is disputed by CVE and a reliable third party, because include_path is initialized to a fixed value before use.  
Phase
Assigned (20070410)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252209 25281 CVE-2007-1924 BUGTRAQ:20070406 phpContact Multiple Remote File Inclusion Vulnerabilities  View
252210 25281 CVE-2007-1924 URL:http://www.securityfocus.com/archive/1/archive/1/464877/100/0/threaded  View
252211 25281 CVE-2007-1924 VIM:20070406 false: phpContact Multiple Remote File Inclusion Vulnerabilities  View
252212 25281 CVE-2007-1924 URL:http://www.attrition.org/pipermail/vim/2007-April/001495.html  View
252213 25281 CVE-2007-1924 SREASON:2528  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54969 JVNDB-2007-003661 JBMC Software DirectAdmin におけるクロスサイトスクリプティングの脆弱性 JBMC Software DirectAdmin には、ログファイルを適切に表示しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1926 25281 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003661.html  View