CVE

Id
28392  
CVE No.
CVE-2007-5035  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php in openEngine 1.9 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the this_module_path parameter. NOTE: this issue is disputed by CVE because PHP encounters a fatal function-call error on a direct request for the file, before reaching the include statement.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295055 28392 CVE-2007-5035 MISC:http://arfis.wordpress.com/2007/09/14/rfi-03-openengine/  View
295056 28392 CVE-2007-5035 BID:25716  View
295057 28392 CVE-2007-5035 URL:http://www.securityfocus.com/bid/25716  View
295058 28392 CVE-2007-5035 OSVDB:38727  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55732 JVNDB-2007-004424 inotify-tools library の src/inotifytools.c の inotifytools_snprintf 関数におけるバッファオーバーフローの脆弱性 inotify-tools library の src/inotifytools.c の inotifytools_snprintf 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2007-5037 28392 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004424.html  View