CVE

Id
29180  
CVE No.
CVE-2007-5823  
Status
Candidate  
Description
Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the username parameter in a Register action.  
Phase
Assigned (20071105)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306105 29180 CVE-2007-5823 BUGTRAQ:20071101 Scribe <= 2.0 Remote PHP Code Execution  View
306106 29180 CVE-2007-5823 URL:http://www.securityfocus.com/archive/1/archive/1/483183/100/0/threaded  View
306107 29180 CVE-2007-5823 MILW0RM:4596  View
306108 29180 CVE-2007-5823 URL:http://www.milw0rm.com/exploits/4596  View
306109 29180 CVE-2007-5823 MISC:http://www.inj3ct-it.org/exploit/scribe.txt  View
306110 29180 CVE-2007-5823 OSVDB:39063  View
306111 29180 CVE-2007-5823 URL:http://osvdb.org/39063  View
306112 29180 CVE-2007-5823 SREASON:3339  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54179 JVNDB-2007-002871 Firefly Media Server の mt-dappd の webserver.c の ws_addarg 関数におけるフォーマットストリングの脆弱性 Firefly Media Server の mt-dappd の webserver.c の ws_addarg 関数には、フォーマットストリングの脆弱性が存在します。 CVE-2007-5825 29180 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002871.html  View