CVE

Id
26881  
CVE No.
CVE-2007-3524  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) admin/includes/author_panel_header.php or (2) admin/includes/admin_header.php.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274405 26881 CVE-2007-3524 MILW0RM:4129  View
274406 26881 CVE-2007-3524 URL:http://www.milw0rm.com/exploits/4129  View
274407 26881 CVE-2007-3524 BID:24722  View
274408 26881 CVE-2007-3524 URL:http://www.securityfocus.com/bid/24722  View
274409 26881 CVE-2007-3524 VUPEN:ADV-2007-2407  View
274410 26881 CVE-2007-3524 URL:http://www.vupen.com/english/advisories/2007/2407  View
274411 26881 CVE-2007-3524 OSVDB:37799  View
274412 26881 CVE-2007-3524 URL:http://osvdb.org/37799  View
274413 26881 CVE-2007-3524 OSVDB:37800  View
274414 26881 CVE-2007-3524 URL:http://osvdb.org/37800  View
274415 26881 CVE-2007-3524 SECUNIA:25898  View
274416 26881 CVE-2007-3524 URL:http://secunia.com/advisories/25898  View
274417 26881 CVE-2007-3524 XF:rwm-level-file-include(35188)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57100 JVNDB-2007-005792 Buddy Zone における SQL インジェクションの脆弱性 Buddy Zone には、SQL インジェクションの脆弱性が存在します。 CVE-2007-3526 26881 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005792.html  View