CVE

Id
28412  
CVE No.
CVE-2007-5055  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php.  
Phase
Assigned (20070924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295223 28412 CVE-2007-5055 MILW0RM:4441  View
295224 28412 CVE-2007-5055 URL:http://www.milw0rm.com/exploits/4441  View
295225 28412 CVE-2007-5055 VUPEN:ADV-2007-3260  View
295226 28412 CVE-2007-5055 URL:http://www.vupen.com/english/advisories/2007/3260  View
295227 28412 CVE-2007-5055 SECUNIA:26931  View
295228 28412 CVE-2007-5055 URL:http://secunia.com/advisories/26931  View
295229 28412 CVE-2007-5055 XF:izicontents-adminhome-rootdp-file-include(36735)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55741 JVNDB-2007-004433 NetSupport Manager Client における認証スキームを回避される脆弱性 NetSupport Manager Client には、(1) ベーシックおよび (2) 認証スキームを回避される脆弱性が存在します。 CVE-2007-5057 28412 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004433.html  View