CVE

Id
28411  
CVE No.
CVE-2007-5054  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the gsLanguage parameter to (1) search/search.php, (2) poll/inlinepoll.php, (3) poll/showpoll.php, (4) links/showlinks.php, or (5) links/submit_links.php in modules/.  
Phase
Assigned (20070924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295216 28411 CVE-2007-5054 MILW0RM:4441  View
295217 28411 CVE-2007-5054 URL:http://www.milw0rm.com/exploits/4441  View
295218 28411 CVE-2007-5054 VUPEN:ADV-2007-3260  View
295219 28411 CVE-2007-5054 URL:http://www.vupen.com/english/advisories/2007/3260  View
295220 28411 CVE-2007-5054 SECUNIA:26931  View
295221 28411 CVE-2007-5054 URL:http://secunia.com/advisories/26931  View
295222 28411 CVE-2007-5054 XF:izicontents-gslanguage-file-include(36734)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53984 JVNDB-2007-002676 複数の製品で使用される ADOdb Lite の adodb-perf-module.inc.php における任意のコードを実行される脆弱性 CMS Made Simple、SAPID CMF、Journalness、PacerCM および Open-Realty 製品で使用される ADOdb Lite の adodb-perf-module.inc.php は、任意のコードを実行される脆弱性が存在します。 CVE-2007-5056 28411 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002676.html  View