CVE

Id
28164  
CVE No.
CVE-2007-4807  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to (1) modules/Discipline/CategoryBreakdownTime.php or (2) modules/Discipline/StudentFieldBreakdown.php.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292197 28164 CVE-2007-4807 MILW0RM:4377  View
292198 28164 CVE-2007-4807 URL:http://www.milw0rm.com/exploits/4377  View
292199 28164 CVE-2007-4807 BID:25603  View
292200 28164 CVE-2007-4807 URL:http://www.securityfocus.com/bid/25603  View
292201 28164 CVE-2007-4807 VUPEN:ADV-2007-3133  View
292202 28164 CVE-2007-4807 URL:http://www.vupen.com/english/advisories/2007/3133  View
292203 28164 CVE-2007-4807 OSVDB:36997  View
292204 28164 CVE-2007-4807 URL:http://www.osvdb.org/36997  View
292205 28164 CVE-2007-4807 OSVDB:36998  View
292206 28164 CVE-2007-4807 URL:http://www.osvdb.org/36998  View
292207 28164 CVE-2007-4807 SECUNIA:26775  View
292208 28164 CVE-2007-4807 URL:http://secunia.com/advisories/26775  View
292209 28164 CVE-2007-4807 XF:focussis-staticpath-file-include(36523)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55676 JVNDB-2007-004368 OFFL における PHP リモートファイルインクルージョンの脆弱性 Online Fantasy Football League (OFFL) には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-4809 28164 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004368.html  View