CVE

Id
28545  
CVE No.
CVE-2007-5188  
Status
Candidate  
Description
Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files via unspecified vectors related to improper upload configuration settings in class/uploader.php and class/mimetypes.inc.php, possibly an incomplete blacklist that omits the .php4 extension.  
Phase
Assigned (20071003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
296752 28545 CVE-2007-5188 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=41586&release_id=543338  View
296753 28545 CVE-2007-5188 CONFIRM:http://www.xoops.org/modules/news/article.php?storyid=3963  View
296754 28545 CVE-2007-5188 BID:25878  View
296755 28545 CVE-2007-5188 URL:http://www.securityfocus.com/bid/25878  View
296756 28545 CVE-2007-5188 VUPEN:ADV-2007-3315  View
296757 28545 CVE-2007-5188 URL:http://www.vupen.com/english/advisories/2007/3315  View
296758 28545 CVE-2007-5188 OSVDB:41386  View
296759 28545 CVE-2007-5188 URL:http://osvdb.org/41386  View
296760 28545 CVE-2007-5188 SECUNIA:27006  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54024 JVNDB-2007-002716 Alcatel OmniVista におけるクロスサイトスクリプティングの脆弱性 Alcatel OmniVista には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5190 28545 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002716.html  View