CVE

Id
28172  
CVE No.
CVE-2007-4815  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channeledit.php, (2) post.php, (3) view.php, or (4) viewitem.php in source/mod/rss/.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292297 28172 CVE-2007-4815 BUGTRAQ:20070920 WebED-0.8999 Multiple Remote File Inclusion Vulnerability  View
292298 28172 CVE-2007-4815 URL:http://www.securityfocus.com/archive/1/archive/1/480108/100/0/threaded  View
292299 28172 CVE-2007-4815 MILW0RM:4384  View
292300 28172 CVE-2007-4815 URL:http://www.milw0rm.com/exploits/4384  View
292301 28172 CVE-2007-4815 BID:25608  View
292302 28172 CVE-2007-4815 URL:http://www.securityfocus.com/bid/25608  View
292303 28172 CVE-2007-4815 VUPEN:ADV-2007-3171  View
292304 28172 CVE-2007-4815 URL:http://www.vupen.com/english/advisories/2007/3171  View
292305 28172 CVE-2007-4815 OSVDB:38395  View
292306 28172 CVE-2007-4815 URL:http://osvdb.org/38395  View
292307 28172 CVE-2007-4815 OSVDB:38396  View
292308 28172 CVE-2007-4815 URL:http://osvdb.org/38396  View
292309 28172 CVE-2007-4815 OSVDB:38397  View
292310 28172 CVE-2007-4815 URL:http://osvdb.org/38397  View
292311 28172 CVE-2007-4815 OSVDB:38398  View
292312 28172 CVE-2007-4815 URL:http://osvdb.org/38398  View
292313 28172 CVE-2007-4815 XF:edengine-codebase-file-include(36532)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53927 JVNDB-2007-002619 Joomla! 用の Restaurante コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 Joomla! 用の Restaurante (com_restaurante) コンポーネントは、無制限にファイルをアップロードする不備があるため、任意の PHP コードをアップロードされる、および実行される脆弱性が存在します。 CVE-2007-4817 28172 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002619.html  View