CVE

Id
25861  
CVE No.
CVE-2007-2504  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in user/turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[tcore] parameter. NOTE: this vulnerability is disputed by CVE and a reliable third party because a direct request to user/turbulence.php triggers a fatal error before inclusion.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259567 25861 CVE-2007-2504 BUGTRAQ:20070421 turbolence core 0.0.1 alpha Remote File Inclusion  View
259568 25861 CVE-2007-2504 URL:http://www.securityfocus.com/archive/1/archive/1/466564/100/100/threaded  View
259569 25861 CVE-2007-2504 VIM:20070422 false: turbolence core 0.0.1 alpha Remote File Inclusion  View
259570 25861 CVE-2007-2504 URL:http://www.attrition.org/pipermail/vim/2007-April/001541.html  View
259571 25861 CVE-2007-2504 BID:23580  View
259572 25861 CVE-2007-2504 URL:http://www.securityfocus.com/bid/23580  View
259573 25861 CVE-2007-2504 SREASON:2673  View
259574 25861 CVE-2007-2504 URL:http://securityreason.com/securityalert/2673  View
259575 25861 CVE-2007-2504 XF:phpturbulence-turbulence-file-include(33824)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56822 JVNDB-2007-005514 Progress Software Progress の OpenEdge におけるサービス運用妨害 (DoS) の脆弱性 Progress Software Progress の OpenEdge の WebSpeed には、サービス運用妨害 (無限ループおよびデーモンハング) 状態となる脆弱性が存在します。 CVE-2007-2506 25861 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005514.html  View