CVE

Id
25332  
CVE No.
CVE-2007-1975  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in SLAED CMS 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path parameter to admin/admin.php or the (2) modpath parameter to index.php.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252605 25332 CVE-2007-1975 BUGTRAQ:20070331 Remot File Include In SLAED_CMS_2  View
252606 25332 CVE-2007-1975 URL:http://www.securityfocus.com/archive/1/archive/1/464349/100/0/threaded  View
252607 25332 CVE-2007-1975 OSVDB:35220  View
252608 25332 CVE-2007-1975 URL:http://osvdb.org/35220  View
252609 25332 CVE-2007-1975 OSVDB:35221  View
252610 25332 CVE-2007-1975 URL:http://osvdb.org/35221  View
252611 25332 CVE-2007-1975 SREASON:2567  View
252612 25332 CVE-2007-1975 URL:http://securityreason.com/securityalert/2567  View
252613 25332 CVE-2007-1975 XF:slaed-index-admin-file-include(33343)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54982 JVNDB-2007-003674 holaCMS の index_cms.php におけるクロスサイトスクリプティングの脆弱性 holaCMS の index_cms.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1977 25332 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003674.html  View