CVE

Id
25340  
CVE No.
CVE-2007-1983  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in include/default_header.php in Cyboards PHP Lite 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter, a different vector than CVE-2006-2871.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252673 25340 CVE-2007-1983 MILW0RM:3660  View
252674 25340 CVE-2007-1983 URL:http://www.milw0rm.com/exploits/3660  View
252675 25340 CVE-2007-1983 VIM:20070411 Cyboards PHP RFI: true for 1.21, fixed in at least 1.25  View
252676 25340 CVE-2007-1983 URL:http://www.attrition.org/pipermail/vim/2007-April/001509.html  View
252677 25340 CVE-2007-1983 BID:23306  View
252678 25340 CVE-2007-1983 URL:http://www.securityfocus.com/bid/23306  View
252679 25340 CVE-2007-1983 OSVDB:35300  View
252680 25340 CVE-2007-1983 URL:http://osvdb.org/35300  View
252681 25340 CVE-2007-1983 XF:cyboards-defaultheader-file-include(33406)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56702 JVNDB-2007-005394 phpexplorator の phpexplorator.php における PHP リモートファイルインクルージョンの脆弱性 phpexplorator の phpexplorator.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-1985 25340 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005394.html  View