CVE

Id
26880  
CVE No.
CVE-2007-3523  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) Ent or (2) Lang parameter.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274396 26880 CVE-2007-3523 MILW0RM:4131  View
274397 26880 CVE-2007-3523 URL:http://www.milw0rm.com/exploits/4131  View
274398 26880 CVE-2007-3523 BID:24724  View
274399 26880 CVE-2007-3523 URL:http://www.securityfocus.com/bid/24724  View
274400 26880 CVE-2007-3523 VUPEN:ADV-2007-2409  View
274401 26880 CVE-2007-3523 URL:http://www.vupen.com/english/advisories/2007/2409  View
274402 26880 CVE-2007-3523 OSVDB:38963  View
274403 26880 CVE-2007-3523 URL:http://osvdb.org/38963  View
274404 26880 CVE-2007-3523 XF:xcms-galerie-file-include(35191)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57099 JVNDB-2007-005791 Ripe Website Manager における設定情報を取得される脆弱性 Ripe Website Manager には、設定情報を取得される脆弱性が存在します。 CVE-2007-3525 26880 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005791.html  View