CVE

Id
25349  
CVE No.
CVE-2007-1992  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in the com_zoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) EXIF_Makernote.php or (2) EXIF.php in classes/iptc/.  
Phase
Assigned (20070411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
252734 25349 CVE-2007-1992 MILW0RM:3706  View
252735 25349 CVE-2007-1992 URL:http://www.milw0rm.com/exploits/3706  View
252736 25349 CVE-2007-1992 BID:23415  View
252737 25349 CVE-2007-1992 URL:http://www.securityfocus.com/bid/23415  View
252738 25349 CVE-2007-1992 VUPEN:ADV-2007-1353  View
252739 25349 CVE-2007-1992 URL:http://www.vupen.com/english/advisories/2007/1353  View
252740 25349 CVE-2007-1992 XF:zmg-exif-file-include(33580)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51607 JVNDB-2007-000269 HP-UX の ARPA transport 機能におけるサービス運用妨害 (DoS) の脆弱性 HP-UX の Address and Routing Parameter Area (ARPA) transport 機能には、サービス運用妨害 (DoS) 状態を引き起こす脆弱性が存在します。 CVE-2007-1994 25349 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000269.html  View