CVE

Id
25343  
CVE No.
CVE-2007-1986  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to template/barnraiser_01/maint_contact_view.tpl.php, and the (3) template_path parameter to template/barnraiser_01/default.tpl.php. NOTE: this issue might overlap CVE-2006-5533.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252688 25343 CVE-2007-1986 MILW0RM:3659  View
252689 25343 CVE-2007-1986 URL:http://www.milw0rm.com/exploits/3659  View
252690 25343 CVE-2007-1986 BID:23303  View
252691 25343 CVE-2007-1986 URL:http://www.securityfocus.com/bid/23303  View
252692 25343 CVE-2007-1986 VUPEN:ADV-2007-1262  View
252693 25343 CVE-2007-1986 URL:http://www.vupen.com/english/advisories/2007/1262  View
252694 25343 CVE-2007-1986 OSVDB:34623  View
252695 25343 CVE-2007-1986 URL:http://osvdb.org/34623  View
252696 25343 CVE-2007-1986 OSVDB:34624  View
252697 25343 CVE-2007-1986 URL:http://osvdb.org/34624  View
252698 25343 CVE-2007-1986 OSVDB:34625  View
252699 25343 CVE-2007-1986 URL:http://osvdb.org/34625  View
252700 25343 CVE-2007-1986 SECUNIA:24773  View
252701 25343 CVE-2007-1986 URL:http://secunia.com/advisories/24773  View
252702 25343 CVE-2007-1986 XF:aroundme-multiple-file-include(33427)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56703 JVNDB-2007-005395 PHPEcho CMS の kernel/filters.inc.php におけるクロスサイトスクリプティングの脆弱性 PHPEcho CMS の kernel/filters.inc.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1988 25343 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005395.html  View