CVE

Id
26345  
CVE No.
CVE-2007-2988  
Status
Candidate  
Description
A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a request to admin/create_engine.php followed by a request to admin/generate_tabs.php.  
Phase
Assigned (20070531)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
266794 26345 CVE-2007-2988 BUGTRAQ:20070528 Inout Meta Searh engine Remote Code Execution  View
266795 26345 CVE-2007-2988 URL:http://www.securityfocus.com/archive/1/archive/1/469808/100/0/threaded  View
266796 26345 CVE-2007-2988 MILW0RM:4004  View
266797 26345 CVE-2007-2988 URL:http://www.milw0rm.com/exploits/4004  View
266798 26345 CVE-2007-2988 BID:24189  View
266799 26345 CVE-2007-2988 URL:http://www.securityfocus.com/bid/24189  View
266800 26345 CVE-2007-2988 BID:24199  View
266801 26345 CVE-2007-2988 URL:http://www.securityfocus.com/bid/24199  View
266802 26345 CVE-2007-2988 OSVDB:42034  View
266803 26345 CVE-2007-2988 URL:http://osvdb.org/42034  View
266804 26345 CVE-2007-2988 SREASON:2763  View
266805 26345 CVE-2007-2988 URL:http://securityreason.com/securityalert/2763  View
266806 26345 CVE-2007-2988 XF:inout-searchengine-create-code-execution(34563)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51744 JVNDB-2007-000407 Sun Solaris 10 の inetd デーモンにおけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris 10 の inetd デーモンにおいて、/var/run/.inetd.uds ソケットファイルの処理に不備があり、inetd デーモンがサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-2990 26345 4.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000407.html  View