CVE

Id
31241  
CVE No.
CVE-2008-1124  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to (1) components/xmlparser/loadparser.php; (2) admin.php, (3) categories.php, (4) categories_add.php, (5) categories_remove.php, (6) edit.php, (7) editdel.php, (8) ftpfeature.php, (9) login.php, (10) pgRSSnews.php, (11) showcat.php, and (12) upload.php in core/admin/; and (13) archive_cat.php, (14) archive_nocat.php, and (15) recent_list.php in core/.  
Phase
Assigned (20080303)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
333472 31241 CVE-2008-1124 MILW0RM:5200  View
333473 31241 CVE-2008-1124 URL:http://www.milw0rm.com/exploits/5200  View
333474 31241 CVE-2008-1124 BID:28038  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50228 JVNDB-2008-005538 phpMyTourney の tourney/index.php における PHP リモートファイルインクルージョンの脆弱性 phpMyTourney の tourney/index.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-1128 31241 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005538.html  View