CVE

Id
29938  
CVE No.
CVE-2007-6581  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the global_lang parameter to (1) header_album.php, (2) header_blog.php, or (3) header_group.php; or (4) admin_header_album.php, (5) admin_header_blog.php, or (6) admin_header_group.php in admin/.  
Phase
Assigned (20071228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316552 29938 CVE-2007-6581 MILW0RM:4767  View
316553 29938 CVE-2007-6581 URL:http://www.milw0rm.com/exploits/4767  View
316554 29938 CVE-2007-6581 MISC:http://www.inj3ct-it.org/exploit/socialengine2.txt  View
316555 29938 CVE-2007-6581 BID:26990  View
316556 29938 CVE-2007-6581 URL:http://www.securityfocus.com/bid/26990  View
316557 29938 CVE-2007-6581 OSVDB:40370  View
316558 29938 CVE-2007-6581 URL:http://osvdb.org/40370  View
316559 29938 CVE-2007-6581 OSVDB:40371  View
316560 29938 CVE-2007-6581 URL:http://osvdb.org/40371  View
316561 29938 CVE-2007-6581 OSVDB:40372  View
316562 29938 CVE-2007-6581 URL:http://osvdb.org/40372  View
316563 29938 CVE-2007-6581 OSVDB:40373  View
316564 29938 CVE-2007-6581 URL:http://osvdb.org/40373  View
316565 29938 CVE-2007-6581 OSVDB:40374  View
316566 29938 CVE-2007-6581 URL:http://osvdb.org/40374  View
316567 29938 CVE-2007-6581 OSVDB:40375  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54352 JVNDB-2007-003044 1024 CMS の admin/ops/findip/ajax/search.php における SQL インジェクションの脆弱性 1024 CMS の admin/ops/findip/ajax/search.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-6583 29938 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003044.html  View