CVE

Id
33005  
CVE No.
CVE-2008-2888  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[application][app_root] parameter to (1) collection.class.php and (2) content_image.class.php in lib/obj/.  
Phase
Assigned (20080627)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358291 33005 CVE-2008-2888 MILW0RM:5901  View
358292 33005 CVE-2008-2888 URL:http://www.milw0rm.com/exploits/5901  View
358293 33005 CVE-2008-2888 BID:29874  View
358294 33005 CVE-2008-2888 URL:http://www.securityfocus.com/bid/29874  View
358295 33005 CVE-2008-2888 SECUNIA:30770  View
358296 33005 CVE-2008-2888 URL:http://secunia.com/advisories/30770  View
358297 33005 CVE-2008-2888 XF:migcms-globals-file-include(43250)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47894 JVNDB-2008-003204 Joomla! 用 EXP Shop コンポーネントにおける SQL インジェクションの脆弱性 Joomla! 用 EXP Shop (com_expshop) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2008-2892 33005 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003204.html  View