CVE

Id
29680  
CVE No.
CVE-2007-6323  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the id parameter to (1) get_image.php or (2) get_file.php in mms_template/.  
Phase
Assigned (20071213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
312901 29680 CVE-2007-6323 MILW0RM:4728  View
312902 29680 CVE-2007-6323 URL:http://www.milw0rm.com/exploits/4728  View
312903 29680 CVE-2007-6323 BID:26852  View
312904 29680 CVE-2007-6323 URL:http://www.securityfocus.com/bid/26852  View
312905 29680 CVE-2007-6323 OSVDB:39148  View
312906 29680 CVE-2007-6323 URL:http://osvdb.org/39148  View
312907 29680 CVE-2007-6323 OSVDB:39149  View
312908 29680 CVE-2007-6323 URL:http://osvdb.org/39149  View
312909 29680 CVE-2007-6323 SECUNIA:28075  View
312910 29680 CVE-2007-6323 URL:http://secunia.com/advisories/28075  View
312911 29680 CVE-2007-6323 XF:mmsgallery-id-directory-traversal(39014)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54280 JVNDB-2007-002972 Fastpublish CMS の adminbereich/designconfig.php における PHP リモートファイルインクルージョンの脆弱性 Fastpublish CMS の adminbereich/designconfig.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-6325 29680 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002972.html  View