CVE

Id
25668  
CVE No.
CVE-2007-2311  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the content_php parameter. NOTE: this issue has been disputed by a reliable third party, stating that content_php is initialized before use.  
Phase
Assigned (20070426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
256719 25668 CVE-2007-2311 BUGTRAQ:20070414 bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy  View
256720 25668 CVE-2007-2311 URL:http://www.securityfocus.com/archive/1/archive/1/465739/100/0/threaded  View
256721 25668 CVE-2007-2311 BUGTRAQ:20070417 Re: bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy  View
256722 25668 CVE-2007-2311 URL:http://www.securityfocus.com/archive/1/archive/1/466016/100/200/threaded  View
256723 25668 CVE-2007-2311 VIM:20070415 false: bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy  View
256724 25668 CVE-2007-2311 URL:http://www.attrition.org/pipermail/vim/2007-April/001526.html  View
256725 25668 CVE-2007-2311 SREASON:2641  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55065 JVNDB-2007-003757 mxBB 用の Shotcast モジュールにおける PHP リモートファイルインクルージョンの脆弱性 mxBB 用の Shotcast モジュールの getinfo1.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2313 25668 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003757.html  View