CVE

Id
25611  
CVE No.
CVE-2007-2254  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this product was referred to as "Allfaclassfieds" in the original disclosure.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
256008 25611 CVE-2007-2254 BUGTRAQ:20070422 Allfaclassfieds (level2.php dir) remote file inclusion  View
256009 25611 CVE-2007-2254 URL:http://www.securityfocus.com/archive/1/archive/1/466648/100/0/threaded  View
256010 25611 CVE-2007-2254 VIM:20070425 [false but true] "Allfaclassfieds" RFI no; PHP Classifieds yes  View
256011 25611 CVE-2007-2254 URL:http://www.attrition.org/pipermail/vim/2007-April/001543.html  View
256012 25611 CVE-2007-2254 SREASON:2618  View
256013 25611 CVE-2007-2254 URL:http://securityreason.com/securityalert/2618  View
256014 25611 CVE-2007-2254 XF:allfaclassfieds-level2-file-include(33798)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56760 JVNDB-2007-005452 TJSChat の you.php におけるクロスサイトスクリプティングの脆弱性 TJSChat の you.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2256 25611 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005452.html  View