CVE

Id
26119  
CVE No.
CVE-2007-2762  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbitrary PHP code via a URL in (1) the pear_dir parameter to Base/Application.php, or the (2) sys_dir parameter to (a) Footer.php, (b) widget.BifContainer.php, (c) widget.BifRoot.php, (d) widget.BifRoot2.php, (e) widget.BifRoot3.php, or (f) widget.BifWarning.php in Widgets/Base/.  
Phase
Assigned (20070518)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
262952 26119 CVE-2007-2762 MILW0RM:3947  View
262953 26119 CVE-2007-2762 URL:http://www.milw0rm.com/exploits/3947  View
262954 26119 CVE-2007-2762 BID:24045  View
262955 26119 CVE-2007-2762 URL:http://www.securityfocus.com/bid/24045  View
262956 26119 CVE-2007-2762 OSVDB:37949  View
262957 26119 CVE-2007-2762 URL:http://osvdb.org/37949  View
262958 26119 CVE-2007-2762 OSVDB:37950  View
262959 26119 CVE-2007-2762 URL:http://osvdb.org/37950  View
262960 26119 CVE-2007-2762 OSVDB:37951  View
262961 26119 CVE-2007-2762 URL:http://osvdb.org/37951  View
262962 26119 CVE-2007-2762 OSVDB:37952  View
262963 26119 CVE-2007-2762 URL:http://osvdb.org/37952  View
262964 26119 CVE-2007-2762 OSVDB:37953  View
262965 26119 CVE-2007-2762 URL:http://osvdb.org/37953  View
262966 26119 CVE-2007-2762 OSVDB:37954  View
262967 26119 CVE-2007-2762 URL:http://osvdb.org/37954  View
262968 26119 CVE-2007-2762 OSVDB:37955  View
262969 26119 CVE-2007-2762 URL:http://osvdb.org/37955  View
262970 26119 CVE-2007-2762 XF:bif-multiple-file-include(34362)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55183 JVNDB-2007-003875 特定の Sun-Brocade SilkWorm スイッチの Linux kernel におけるサービス運用妨害 (DoS) の脆弱性 特定の Sun-Brocade SilkWorm スイッチの組込み型 Linux kernel は、ルート以外のユーザがカーネルプロセスを作成する状況を適切に処理しないため、サービス運用妨害 (oops およびデバイスリブート) 状態となる脆弱性が存在します。 CVE-2007-2764 26119 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003875.html  View