CVE

Id
28162  
CVE No.
CVE-2007-4805  
Status
Candidate  
Description
Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) in the p parameter.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292171 28162 CVE-2007-4805 MILW0RM:4378  View
292172 28162 CVE-2007-4805 URL:http://www.milw0rm.com/exploits/4378  View
292173 28162 CVE-2007-4805 VIM:20070911 true: fuzzylime (cms) path traversal  View
292174 28162 CVE-2007-4805 URL:http://www.attrition.org/pipermail/vim/2007-September/001780.html  View
292175 28162 CVE-2007-4805 BID:25604  View
292176 28162 CVE-2007-4805 URL:http://www.securityfocus.com/bid/25604  View
292177 28162 CVE-2007-4805 VUPEN:ADV-2007-3135  View
292178 28162 CVE-2007-4805 URL:http://www.vupen.com/english/advisories/2007/3135  View
292179 28162 CVE-2007-4805 OSVDB:36996  View
292180 28162 CVE-2007-4805 URL:http://osvdb.org/36996  View
292181 28162 CVE-2007-4805 SECUNIA:26740  View
292182 28162 CVE-2007-4805 URL:http://secunia.com/advisories/26740  View
292183 28162 CVE-2007-4805 XF:fuzzylime-getgalldata-file-include(36520)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53924 JVNDB-2007-002616 Focus/SIS における PHP リモートファイルインクルージョンの脆弱性 Focus/SIS には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-4807 28162 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002616.html  View