CVE

Id
26136  
CVE No.
CVE-2007-2779  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rInfo[content] parameter.  
Phase
Assigned (20070521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
263132 26136 CVE-2007-2779 MILW0RM:3948  View
263133 26136 CVE-2007-2779 URL:http://www.milw0rm.com/exploits/3948  View
263134 26136 CVE-2007-2779 BID:24047  View
263135 26136 CVE-2007-2779 URL:http://www.securityfocus.com/bid/24047  View
263136 26136 CVE-2007-2779 VUPEN:ADV-2007-1880  View
263137 26136 CVE-2007-2779 URL:http://www.vupen.com/english/advisories/2007/1880  View
263138 26136 CVE-2007-2779 OSVDB:36233  View
263139 26136 CVE-2007-2779 URL:http://osvdb.org/36233  View
263140 26136 CVE-2007-2779 SECUNIA:25342  View
263141 26136 CVE-2007-2779 URL:http://secunia.com/advisories/25342  View
263142 26136 CVE-2007-2779 XF:libstats-templatecsv-file-include(34369)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56906 JVNDB-2007-005598 WikyBlog の include/sessionRegister.php におけるクロスサイトスクリプティングの脆弱性 WikyBlog の include/sessionRegister.php は、特定の data2 配列要素に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2781 26136 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005598.html  View