CVE

Id
28655  
CVE No.
CVE-2007-5298  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP code via a URL in the cfg[document_uri] parameter to (1) _administration/securite.php and (2) _administration/gestion_configurations/save_config.php.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298589 28655 CVE-2007-5298 BUGTRAQ:20071006 CMS Creamotion - Remote File inclusion  View
298590 28655 CVE-2007-5298 URL:http://www.securityfocus.com/archive/1/archive/1/481669/100/0/threaded  View
298591 28655 CVE-2007-5298 MILW0RM:4491  View
298592 28655 CVE-2007-5298 URL:http://www.milw0rm.com/exploits/4491  View
298593 28655 CVE-2007-5298 BID:25947  View
298594 28655 CVE-2007-5298 URL:http://www.securityfocus.com/bid/25947  View
298595 28655 CVE-2007-5298 VUPEN:ADV-2007-3430  View
298596 28655 CVE-2007-5298 URL:http://www.vupen.com/english/advisories/2007/3430  View
298597 28655 CVE-2007-5298 OSVDB:38637  View
298598 28655 CVE-2007-5298 URL:http://osvdb.org/38637  View
298599 28655 CVE-2007-5298 OSVDB:38638  View
298600 28655 CVE-2007-5298 URL:http://osvdb.org/38638  View
298601 28655 CVE-2007-5298 SREASON:3203  View
298602 28655 CVE-2007-5298 URL:http://securityreason.com/securityalert/3203  View
298603 28655 CVE-2007-5298 XF:cmscreamotion-cfgdocumenturi-file-include(36989)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57500 JVNDB-2007-006192 wzdftpd の libwzd-core/wzd_login.c におけるサービス運用妨害 (DoS) の脆弱性 wzdftpd の libwzd-core/wzd_login.c の do_login_loop 関数は、一つずれエラー (Off-by-one) が発生するため、サービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-5300 28655 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006192.html  View