CVE

Id
25864  
CVE No.
CVE-2007-2507  
Status
Candidate  
Description
Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the item parameter.  
Phase
Assigned (20070503)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259599 25864 CVE-2007-2507 MILW0RM:3832  View
259600 25864 CVE-2007-2507 URL:http://www.milw0rm.com/exploits/3832  View
259601 25864 CVE-2007-2507 VIM:20070503 true: 1024 CMS LFI: fun protection scheme failure  View
259602 25864 CVE-2007-2507 URL:http://www.attrition.org/pipermail/vim/2007-May/001578.html  View
259603 25864 CVE-2007-2507 BID:23774  View
259604 25864 CVE-2007-2507 URL:http://www.securityfocus.com/bid/23774  View
259605 25864 CVE-2007-2507 OSVDB:35542  View
259606 25864 CVE-2007-2507 URL:http://osvdb.org/35542  View
259607 25864 CVE-2007-2507 VUPEN:ADV-2007-1630  View
259608 25864 CVE-2007-2507 URL:http://www.vupen.com/english/advisories/2007/1630  View
259609 25864 CVE-2007-2507 SECUNIA:25120  View
259610 25864 CVE-2007-2507 URL:http://secunia.com/advisories/25120  View
259611 25864 CVE-2007-2507 XF:1024cms-download-directory-traversal(34004)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51700 JVNDB-2007-000363 PHP の ftp_putcmd() 関数における CRLF インジェクションの脆弱性 PHP の ftp_putcmd() 関数には、パラメータとして改行文字列を挿入可能であるために、CRLF インジェクションの脆弱性が存在します。 CVE-2007-2509 25864 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000363.html  View