CVE

Id
28797  
CVE No.
CVE-2007-5440  
Status
Candidate  
Description
** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter to (1) index.php or (2) login.php. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker.  
Phase
Assigned (20071014)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
301376 28797 CVE-2007-5440 BUGTRAQ:20071010 Vulnerabilities digest  View
301377 28797 CVE-2007-5440 URL:http://www.securityfocus.com/archive/1/archive/1/482006/100/0/threaded  View
301378 28797 CVE-2007-5440 MISC:http://securityvulns.com/Rdocument959.html  View
301379 28797 CVE-2007-5440 MISC:http://securityvulns.com/source26994.html  View
301380 28797 CVE-2007-5440 BID:26034  View
301381 28797 CVE-2007-5440 URL:http://www.securityfocus.com/bid/26034  View
301382 28797 CVE-2007-5440 OSVDB:43486  View
301383 28797 CVE-2007-5440 URL:http://osvdb.org/43486  View
301384 28797 CVE-2007-5440 SREASON:3216  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54085 JVNDB-2007-002777 CMS Made Simple における不特定のファイルをアップロードされる脆弱性 CMS Made Simple は、アップロードを試行するユーザへ割り当てたパーミッションをチェックしないため、不特定のファイルをアップロードされる脆弱性が存在します。 CVE-2007-5442 28797 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002777.html  View