CVE

Id
32020  
CVE No.
CVE-2008-1903  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory parameter.  
Phase
Assigned (20080421)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345391 32020 CVE-2008-1903 MILW0RM:5429  View
345392 32020 CVE-2008-1903 URL:http://www.milw0rm.com/exploits/5429  View
345393 32020 CVE-2008-1903 BID:28748  View
345394 32020 CVE-2008-1903 URL:http://www.securityfocus.com/bid/28748  View
345395 32020 CVE-2008-1903 SECUNIA:29797  View
345396 32020 CVE-2008-1903 URL:http://secunia.com/advisories/29797  View
345397 32020 CVE-2008-1903 XF:newsoffice-newsshow-file-include(41770)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47666 JVNDB-2008-002976 cpCommerce の functions/display_page.func.php における SQL インジェクションの脆弱性 cpCommerce の functions/display_page.func.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1907 32020 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002976.html  View