CVE

Id
27299  
CVE No.
CVE-2007-3942  
Status
Candidate  
Description
** DISPUTED ** Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourcedir and actionArray are defined before use.  
Phase
Assigned (20070720)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
280449 27299 CVE-2007-3942 BUGTRAQ:20070717 LFI On SMF 1.1.3  View
280450 27299 CVE-2007-3942 URL:http://www.securityfocus.com/archive/1/archive/1/473866/100/0/threaded  View
280451 27299 CVE-2007-3942 BUGTRAQ:20070718 Re: LFI On SMF 1.1.3  View
280452 27299 CVE-2007-3942 URL:http://www.securityfocus.com/archive/1/archive/1/473991/100/0/threaded  View
280453 27299 CVE-2007-3942 BUGTRAQ:20070925 Re: LFI On SMF 1.1.3  View
280454 27299 CVE-2007-3942 URL:http://www.securityfocus.com/archive/1/archive/1/480572/100/0/threaded  View
280455 27299 CVE-2007-3942 XF:smf-sourcedir-file-include(35451)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53699 JVNDB-2007-002391 Apple Safari などの PCRE ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 Apple Safari および iPhone の WebKit の JavaScript エンジンの Perl Compatible Regular Expressions (PCRE) ライブラリには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-3944 27299 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002391.html  View