CVE

Id
28668  
CVE No.
CVE-2007-5311  
Status
Candidate  
Description
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter.  
Phase
Assigned (20071009)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
298763 28668 CVE-2007-5311 BUGTRAQ:20071008 TorrentTrader Classic Mutiple Remote vulnerabilities  View
298764 28668 CVE-2007-5311 URL:http://www.securityfocus.com/archive/1/archive/1/481749/100/0/threaded  View
298765 28668 CVE-2007-5311 MILW0RM:4500  View
298766 28668 CVE-2007-5311 URL:http://www.milw0rm.com/exploits/4500  View
298767 28668 CVE-2007-5311 VUPEN:ADV-2007-3451  View
298768 28668 CVE-2007-5311 URL:http://www.vupen.com/english/advisories/2007/3451  View
298769 28668 CVE-2007-5311 OSVDB:37652  View
298770 28668 CVE-2007-5311 URL:http://osvdb.org/37652  View
298771 28668 CVE-2007-5311 SECUNIA:27109  View
298772 28668 CVE-2007-5311 URL:http://secunia.com/advisories/27109  View
298773 28668 CVE-2007-5311 SREASON:3207  View
298774 28668 CVE-2007-5311 URL:http://securityreason.com/securityalert/3207  View
298775 28668 CVE-2007-5311 XF:torrenttrader-adminfunctions-file-include(37004)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57508 JVNDB-2007-006200 Picturesolution の install/config.php における PHP リモートファイルインクルージョンの脆弱性 Picturesolution の install/config.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-5313 28668 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006200.html  View