CVE

Id
27366  
CVE No.
CVE-2007-4009  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the thisdir parameter.  
Phase
Assigned (20070725)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
281418 27366 CVE-2007-4009 MILW0RM:4219  View
281419 27366 CVE-2007-4009 URL:http://www.milw0rm.com/exploits/4219  View
281420 27366 CVE-2007-4009 MISC:http://xpkzxc.com/exploits/confixx.txt  View
281421 27366 CVE-2007-4009 CONFIRM:ftp://download1.swsoft.com/Confixx/security_hotfix/1/release_notes.txt  View
281422 27366 CVE-2007-4009 BID:25036  View
281423 27366 CVE-2007-4009 URL:http://www.securityfocus.com/bid/25036  View
281424 27366 CVE-2007-4009 VUPEN:ADV-2007-2743  View
281425 27366 CVE-2007-4009 URL:http://www.vupen.com/english/advisories/2007/2743  View
281426 27366 CVE-2007-4009 SECUNIA:26300  View
281427 27366 CVE-2007-4009 URL:http://secunia.com/advisories/26300  View
281428 27366 CVE-2007-4009 XF:confixxpro-saveserver-file-include(35586)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53718 JVNDB-2007-002410 Cisco 4100 におけるサービス運用妨害 (DoS) の脆弱性 Cisco 4100、Cisco 4400、Airespace 4000、Catalyst 6500、および 3750 Wireless LAN Controller (WLC) ソフトウェアには、サービス運用妨害 (トラフィック増幅または ARP ストーム) 状態となる脆弱性が存在します。 CVE-2007-4011 27366 7.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002410.html  View