CVE

Id
25769  
CVE No.
CVE-2007-2412  
Status
Candidate  
Description
** DISPUTED ** Directory traversal vulnerability in modules/file.php in Seir Anphin allows remote attackers to obtain sensitive information via a .. (dot dot) in the a[filepath] parameter. NOTE: a third party has disputed this issue because the a array is populated by a database query before use.  
Phase
Assigned (20070430)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
257800 25769 CVE-2007-2412 BUGTRAQ:20070428 Seir Anphin (file.php a[filepath]) Remote File Disclosure Vulnerability  View
257801 25769 CVE-2007-2412 URL:http://www.securityfocus.com/archive/1/archive/1/467103/100/0/threaded  View
257802 25769 CVE-2007-2412 VIM:20070429 false: Seir Anphin (file.php a[filepath]) Remote File Disclosure Vulnerability  View
257803 25769 CVE-2007-2412 URL:http://www.attrition.org/pipermail/vim/2007-April/001567.html  View
257804 25769 CVE-2007-2412 SREASON:2651  View
257805 25769 CVE-2007-2412 URL:http://securityreason.com/securityalert/2651  View
257806 25769 CVE-2007-2412 XF:seiranphin-file-directory-traversal(33962)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55092 JVNDB-2007-003784 MyServer におけるサービス運用妨害 (DoS) の脆弱性 MyServer には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-2414 25769 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003784.html  View