CVE

Id
25840  
CVE No.
CVE-2007-2483  
Status
Candidate  
Description
Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the wpPATH parameter.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259332 25840 CVE-2007-2483 BUGTRAQ:20070502 [ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (wpPATH) Remote File Inclusion Vulnerability  View
259333 25840 CVE-2007-2483 URL:http://www.securityfocus.com/archive/1/archive/1/467363/100/0/threaded  View
259334 25840 CVE-2007-2483 MILW0RM:3824  View
259335 25840 CVE-2007-2483 URL:http://www.milw0rm.com/exploits/3824  View
259336 25840 CVE-2007-2483 MISC:http://advisories.echo.or.id/adv/adv82-K-159-2007.txt  View
259337 25840 CVE-2007-2483 CONFIRM:http://alexrabe.boelinger.com/  View
259338 25840 CVE-2007-2483 VUPEN:ADV-2007-1614  View
259339 25840 CVE-2007-2483 URL:http://www.vupen.com/english/advisories/2007/1614  View
259340 25840 CVE-2007-2483 OSVDB:37297  View
259341 25840 CVE-2007-2483 URL:http://osvdb.org/37297  View
259342 25840 CVE-2007-2483 SECUNIA:25063  View
259343 25840 CVE-2007-2483 URL:http://secunia.com/advisories/25063  View
259344 25840 CVE-2007-2483 XF:wptable-button-file-include(33989)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56818 JVNDB-2007-005510 WordPress 用の myflash プラグインにおける PHP リモートファイルインクルージョンの脆弱性 WordPress 用の myflash プラグインの myflash-button.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2485 25840 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005510.html  View