CVE

Id
29941  
CVE No.
CVE-2007-6584  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the lang parameter to pages/print/default/ops/news.php or (2) the theme_dir parameter to pages/download/default/ops/search.php; or the admin_theme_dir parameter to (3) download.php, (4) forum.php, or (5) news.php in admin/ops/reports/ops/. NOTE: it was later reported that 1.4.2 beta and earlier are also affected for vector 1.  
Phase
Assigned (20071228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
316580 29941 CVE-2007-6584 MILW0RM:4765  View
316581 29941 CVE-2007-6584 URL:http://www.milw0rm.com/exploits/4765  View
316582 29941 CVE-2007-6584 MILW0RM:5434  View
316583 29941 CVE-2007-6584 URL:http://www.milw0rm.com/exploits/5434  View
316584 29941 CVE-2007-6584 BID:28753  View
316585 29941 CVE-2007-6584 URL:http://www.securityfocus.com/bid/28753  View
316586 29941 CVE-2007-6584 OSVDB:41280  View
316587 29941 CVE-2007-6584 URL:http://osvdb.org/41280  View
316588 29941 CVE-2007-6584 OSVDB:41281  View
316589 29941 CVE-2007-6584 URL:http://osvdb.org/41281  View
316590 29941 CVE-2007-6584 OSVDB:41282  View
316591 29941 CVE-2007-6584 URL:http://osvdb.org/41282  View
316592 29941 CVE-2007-6584 OSVDB:41283  View
316593 29941 CVE-2007-6584 URL:http://osvdb.org/41283  View
316594 29941 CVE-2007-6584 OSVDB:41284  View
316595 29941 CVE-2007-6584 URL:http://osvdb.org/41284  View
316596 29941 CVE-2007-6584 SECUNIA:29810  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56086 JVNDB-2007-004778 nicLOR-CMS の sezione_news.php における SQL インジェクションの脆弱性 nicLOR-CMS の sezione_news.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-6586 29941 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004778.html  View