CVE

Id
27538  
CVE No.
CVE-2007-4181  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a function that does not receive the dir parameter from an HTTP request.  
Phase
Assigned (20070807)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
283346 27538 CVE-2007-4181 BUGTRAQ:20070802 Pluck 4.3 themes.php Remote File Inclusion and disclosure  View
283347 27538 CVE-2007-4181 URL:http://www.securityfocus.com/archive/1/archive/1/475323/100/0/threaded  View
283348 27538 CVE-2007-4181 MISC:http://outlaw.aria-security.info/?p=12  View
283349 27538 CVE-2007-4181 VIM:20070802 False: Pluck 4.3 themes.php Remote File Inclusion and disclosure  View
283350 27538 CVE-2007-4181 URL:http://www.attrition.org/pipermail/vim/2007-August/001752.html  View
283351 27538 CVE-2007-4181 SREASON:2973  View
283352 27538 CVE-2007-4181 URL:http://securityreason.com/securityalert/2973  View
283353 27538 CVE-2007-4181 XF:pluck-theme-file-include(35756)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55527 JVNDB-2007-004219 paBugs の main.php における SQL インジェクションの脆弱性 paBugs の main.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-4183 27538 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004219.html  View