CVE

Id
29168  
CVE No.
CVE-2007-5811  
Status
Candidate  
Description
** DISPUTED ** Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter. NOTE: this issue is disputed for 8.0.2 by a reliable third party, who notes that the PHP code is syntactically incorrect and cannot be executed.  
Phase
Assigned (20071105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
305995 29168 CVE-2007-5811 MILW0RM:4590  View
305996 29168 CVE-2007-5811 URL:http://www.milw0rm.com/exploits/4590  View
305997 29168 CVE-2007-5811 VIM:20071031 phpMyConferences <= 8.0.2 Remote File Disclosure Vulnerability  View
305998 29168 CVE-2007-5811 URL:http://www.attrition.org/pipermail/vim/2007-October/001844.html  View
305999 29168 CVE-2007-5811 VIM:20071031 phpMyConferences <= 8.0.2 Remote File Disclosure Vulnerability  View
306000 29168 CVE-2007-5811 URL:http://www.attrition.org/pipermail/vim/2007-October/001845.html  View
306001 29168 CVE-2007-5811 BID:26278  View
306002 29168 CVE-2007-5811 URL:http://www.securityfocus.com/bid/26278  View
306003 29168 CVE-2007-5811 OSVDB:39018  View
306004 29168 CVE-2007-5811 URL:http://osvdb.org/39018  View
306005 29168 CVE-2007-5811 XF:phpmyconferences-dir-directory-traversal(38183)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55910 JVNDB-2007-004602 ISPworker の download.php におけるディレクトリトラバーサルの脆弱性 ISPworker の download.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-5813 29168 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004602.html  View