CVE

Id
25779  
CVE No.
CVE-2007-2422  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild) 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter to (1) config-bak.php or (2) config.php. NOTE: CVE disputes this vulnerability because the unmodified scripts set the applicable variable to the empty string; reasonable modified copies would use a fixed pathname string.  
Phase
Assigned (20070501)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
257895 25779 CVE-2007-2422 BUGTRAQ:20070425 modbuild >> 4.1 Remote File Inclusion  View
257896 25779 CVE-2007-2422 URL:http://www.securityfocus.com/archive/1/archive/1/466953/100/0/threaded  View
257897 25779 CVE-2007-2422 SREASON:2659  View
257898 25779 CVE-2007-2422 URL:http://securityreason.com/securityalert/2659  View
257899 25779 CVE-2007-2422 XF:modbuilder-config-file-include(33917)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56800 JVNDB-2007-005492 themerchant の help/index.php における PHP リモートファイルインクルージョンの脆弱性 The Merchant (themerchant) の help/index.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2424 25779 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005492.html  View