CVE

Id
32767  
CVE No.
CVE-2008-2650  
Status
Candidate  
Description
Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including adm.php and then invoking the upload action. NOTE: on 20080601, the vendor patched 3.1 without changing the version number.  
Phase
Assigned (20080610)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354587 32767 CVE-2008-2650 MILW0RM:5700  View
354588 32767 CVE-2008-2650 URL:http://www.milw0rm.com/exploits/5700  View
354589 32767 CVE-2008-2650 CONFIRM:http://www.cmsimple.com/forum/viewtopic.php?f=2&t=17  View
354590 32767 CVE-2008-2650 BID:29450  View
354591 32767 CVE-2008-2650 URL:http://www.securityfocus.com/bid/29450  View
354592 32767 CVE-2008-2650 OSVDB:45881  View
354593 32767 CVE-2008-2650 URL:http://osvdb.org/45881  View
354594 32767 CVE-2008-2650 SECUNIA:30463  View
354595 32767 CVE-2008-2650 URL:http://secunia.com/advisories/30463  View
354596 32767 CVE-2008-2650 XF:cmsimple-index-file-include(42792)  View
354597 32767 CVE-2008-2650 URL:http://xforce.iss.net/xforce/xfdb/42792  View
354598 32767 CVE-2008-2650 XF:cmsimple-index-file-upload(42793)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49222 JVNDB-2008-004532 Motion の webhttpd.c の read_client 関数における任意のコードを実行される脆弱性 Motion の webhttpd.c の read_client 関数は、一づれエラーが発生するため、任意のコードを実行される脆弱性が存在します。 CVE-2008-2654 32767 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004532.html  View