CVE

Id
27882  
CVE No.
CVE-2007-4525  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelette_cache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the squelette_cache variable is initialized before use, and is only used within the scope of a function.  
Phase
Assigned (20070824)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287615 27882 CVE-2007-4525 BUGTRAQ:20070823 SPIP v1.7 Remote File Inclusion Bug  View
287616 27882 CVE-2007-4525 URL:http://www.securityfocus.com/archive/1/archive/1/477423/100/0/threaded  View
287617 27882 CVE-2007-4525 BUGTRAQ:20070824 Re: SPIP v1.7 Remote File Inclusion Bug  View
287618 27882 CVE-2007-4525 URL:http://www.securityfocus.com/archive/1/archive/1/477728/100/0/threaded  View
287619 27882 CVE-2007-4525 BID:25416  View
287620 27882 CVE-2007-4525 URL:http://www.securityfocus.com/bid/25416  View
287621 27882 CVE-2007-4525 SREASON:3056  View
287622 27882 CVE-2007-4525 URL:http://securityreason.com/securityalert/3056  View
287623 27882 CVE-2007-4525 XF:spip-inccalcul-file-include(36218)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57330 JVNDB-2007-006022 phphq.Net phUploader の phUploader.php における任意のコードをアップロードされる脆弱性 phphq.Net phUploader の phUploader.php は、無制限にファイルをアップロードする不備があるため、任意のコードをアップロードおよび実行される脆弱性が存在します。 CVE-2007-4527 27882 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006022.html  View