CVE

Id
25609  
CVE No.
CVE-2007-2252  
Status
Candidate  
Description
Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255994 25609 CVE-2007-2252 MISC:http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10  View
255995 25609 CVE-2007-2252 BID:23574  View
255996 25609 CVE-2007-2252 URL:http://www.securityfocus.com/bid/23574  View
255997 25609 CVE-2007-2252 OSVDB:35051  View
255998 25609 CVE-2007-2252 URL:http://osvdb.org/35051  View
255999 25609 CVE-2007-2252 SECUNIA:24934  View
256000 25609 CVE-2007-2252 URL:http://secunia.com/advisories/24934  View
256001 25609 CVE-2007-2252 XF:exponentcms-iconspopup-directory-traversal(33936)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53195 JVNDB-2007-001887 PHP Classifieds の admin/setup/level2.php における PHP リモートファイルインクルージョンの脆弱性 PHP Classifieds の admin/setup/level2.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2254 25609 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001887.html  View