CVE

Id
25839  
CVE No.
CVE-2007-2482  
Status
Candidate  
Description
Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the wpPATH parameter.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259315 25839 CVE-2007-2482 BUGTRAQ:20070502 [ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability  View
259316 25839 CVE-2007-2482 URL:http://www.securityfocus.com/archive/1/archive/1/467362/100/0/threaded  View
259317 25839 CVE-2007-2482 MILW0RM:3825  View
259318 25839 CVE-2007-2482 URL:http://www.milw0rm.com/exploits/  View
259319 25839 CVE-2007-2482 MISC:http://advisories.echo.or.id/adv/adv81-K-159-2007.txt  View
259320 25839 CVE-2007-2482 CONFIRM:http://alexrabe.boelinger.com/  View
259321 25839 CVE-2007-2482 BID:23737  View
259322 25839 CVE-2007-2482 URL:http://www.securityfocus.com/bid/23737  View
259323 25839 CVE-2007-2482 OSVDB:45168  View
259324 25839 CVE-2007-2482 URL:http://osvdb.org/45168  View
259325 25839 CVE-2007-2482 VUPEN:ADV-2007-1615  View
259326 25839 CVE-2007-2482 URL:http://www.vupen.com/english/advisories/2007/1615  View
259327 25839 CVE-2007-2482 SECUNIA:25074  View
259328 25839 CVE-2007-2482 URL:http://secunia.com/advisories/25074  View
259329 25839 CVE-2007-2482 SREASON:2660  View
259330 25839 CVE-2007-2482 URL:http://securityreason.com/securityalert/2660  View
259331 25839 CVE-2007-2482 XF:wordtube-wordtube-file-include(33996)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56817 JVNDB-2007-005509 WordPress 用の wp-Table プラグインにおける PHP リモートファイルインクルージョンの脆弱性 WordPress 用の wp-Table プラグインの js/wptable-button.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2484 25839 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005509.html  View