CVE

Id
25344  
CVE No.
CVE-2007-1987  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _plugin_file parameter to smarty/internals/core.load_pulgins.php or the (2) root_path parameter to index.php. NOTE: CVE disputes (1) because the inclusion occurs within a function that is not called during a direct request. CVE disputes (2) because root_path is defined in config.php before use.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252703 25344 CVE-2007-1987 BUGTRAQ:20070404 phpechocms2 Remote File Include Vulnerabilities  View
252704 25344 CVE-2007-1987 URL:http://www.securityfocus.com/archive/1/archive/1/464709/100/0/threaded  View
252705 25344 CVE-2007-1987 OSVDB:34117  View
252706 25344 CVE-2007-1987 URL:http://osvdb.org/34117  View
252707 25344 CVE-2007-1987 SREASON:2551  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53117 JVNDB-2007-001809 DotClear におけるクロスサイトスクリプティングの脆弱性 DotClear には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-1989 25344 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001809.html  View