CVE

Id
25591  
CVE No.
CVE-2007-2234  
Status
Candidate  
Description
include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get function when checking the register_globals setting, which allows remote attackers to register global parameters, as demonstrated by an SQL injection attack on the search_id parameter to search.php.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255688 25591 CVE-2007-2234 BUGTRAQ:20070411 PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)  View
255689 25591 CVE-2007-2234 URL:http://www.securityfocus.com/archive/1/archive/1/465400/100/100/threaded  View
255690 25591 CVE-2007-2234 BUGTRAQ:20070411 PunBB <= 1.2.14 Remote Code Execution (Exploit)  View
255691 25591 CVE-2007-2234 URL:http://www.securityfocus.com/archive/1/archive/1/465338/100/100/threaded  View
255692 25591 CVE-2007-2234 MISC:http://www.acid-root.new.fr/advisories/13070411.txt  View
255693 25591 CVE-2007-2234 CONFIRM:http://dev.punbb.org/changeset/933  View
255694 25591 CVE-2007-2234 SREASON:2613  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56756 JVNDB-2007-005448 PunBB の footer.php における include/user/ 配下のローカルファイルをインクルードされる脆弱性 PunBB の footer.php には、include/user/ 配下のローカルファイルをインクルードされる脆弱性が存在します。 CVE-2007-2236 25591 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005448.html  View