CVE

Id
26892  
CVE No.
CVE-2007-3535  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) FORUM_LANGUAGE parameter to functions.php or the (2) style parameter to bottom.php.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274515 26892 CVE-2007-3535 MILW0RM:4124  View
274516 26892 CVE-2007-3535 URL:http://www.milw0rm.com/exploits/4124  View
274517 26892 CVE-2007-3535 OSVDB:37110  View
274518 26892 CVE-2007-3535 URL:http://osvdb.org/37110  View
274519 26892 CVE-2007-3535 OSVDB:37111  View
274520 26892 CVE-2007-3535 URL:http://osvdb.org/37111  View
274521 26892 CVE-2007-3535 SECUNIA:25893  View
274522 26892 CVE-2007-3535 URL:http://secunia.com/advisories/25893  View
274523 26892 CVE-2007-3535 XF:glshdeaf-functionsbottom-file-include(35160)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55372 JVNDB-2007-004064 iSeries マシン上の IBM OS/400 におけるファイアーウォールルールを回避される脆弱性 iSeries マシン上の IBM OS/400 は、TCP SYN-FIN パケットへの応答を送信するため、システム情報を取得される、およびファイアーウォールルールを回避される脆弱性が存在します。 CVE-2007-3537 26892 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004064.html  View