CVE

Id
25841  
CVE No.
CVE-2007-2484  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259345 25841 CVE-2007-2484 BUGTRAQ:20070502 [ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (wpPATH) Remote File Inclusion Vulnerability  View
259346 25841 CVE-2007-2484 URL:http://www.securityfocus.com/archive/1/archive/1/467363/100/0/threaded  View
259347 25841 CVE-2007-2484 MILW0RM:3824  View
259348 25841 CVE-2007-2484 URL:http://www.milw0rm.com/exploits/3824  View
259349 25841 CVE-2007-2484 MISC:http://advisories.echo.or.id/adv/adv82-K-159-2007.txt  View
259350 25841 CVE-2007-2484 CONFIRM:http://alexrabe.boelinger.com/  View
259351 25841 CVE-2007-2484 OSVDB:34357  View
259352 25841 CVE-2007-2484 URL:http://osvdb.org/34357  View
259353 25841 CVE-2007-2484 VUPEN:ADV-2007-1614  View
259354 25841 CVE-2007-2484 URL:http://www.vupen.com/english/advisories/2007/1614  View
259355 25841 CVE-2007-2484 SECUNIA:25063  View
259356 25841 CVE-2007-2484 URL:http://secunia.com/advisories/25063  View
259357 25841 CVE-2007-2484 XF:wptable-button-file-include(33989)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55105 JVNDB-2007-003797 Motobit の download.asp におけるディレクトリトラバーサルの脆弱性 Motobit の download.asp には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-2486 25841 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003797.html  View