CVE

Id
29679  
CVE No.
CVE-2007-6322  
Status
Candidate  
Description
Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.  
Phase
Assigned (20071213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
312892 29679 CVE-2007-6322 MILW0RM:4729  View
312893 29679 CVE-2007-6322 URL:http://www.milw0rm.com/exploits/4729  View
312894 29679 CVE-2007-6322 BID:26849  View
312895 29679 CVE-2007-6322 URL:http://www.securityfocus.com/bid/26849  View
312896 29679 CVE-2007-6322 OSVDB:40090  View
312897 29679 CVE-2007-6322 URL:http://osvdb.org/40090  View
312898 29679 CVE-2007-6322 SECUNIA:28071  View
312899 29679 CVE-2007-6322 URL:http://secunia.com/advisories/28071  View
312900 29679 CVE-2007-6322 XF:xml2owl-filedownload-directory-traversal(39010)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54279 JVNDB-2007-002971 CityWriter の head.php における PHP リモートファイルインクルージョンの脆弱性 CityWriter の head.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-6324 29679 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002971.html  View