CVE

Id
25435  
CVE No.
CVE-2007-2078  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, since the path_to_folder variable is initialized before use.  
Phase
Assigned (20070417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
253814 25435 CVE-2007-2078 BUGTRAQ:20070414 Maian Weblog v3.1  View
253815 25435 CVE-2007-2078 URL:http://www.securityfocus.com/archive/1/archive/1/465735/100/0/threaded  View
253816 25435 CVE-2007-2078 BUGTRAQ:20070415 Re: phpMyChat-0.14.5  View
253817 25435 CVE-2007-2078 URL:http://archives.neohapsis.com/archives/bugtraq/2007-04/0244.html  View
253818 25435 CVE-2007-2078 VIM:20070415 false: Maian Weblog v3.1  View
253819 25435 CVE-2007-2078 URL:http://attrition.org/pipermail/vim/2007-April/001527.html  View
253820 25435 CVE-2007-2078 OSVDB:35360  View
253821 25435 CVE-2007-2078 URL:http://osvdb.org/35360  View
253822 25435 CVE-2007-2078 SREASON:2582  View
253823 25435 CVE-2007-2078 URL:http://securityreason.com/securityalert/2582  View
253824 25435 CVE-2007-2078 XF:maianweblog-pathtofolder-file-include(33708)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56732 JVNDB-2007-005424 Windows 用の XAMPP における SQL インジェクションの脆弱性 Windows 用の XAMPP には、SQL インジェクションの脆弱性が存在します。 CVE-2007-2080 25435 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005424.html  View