CVE

Id
33022  
CVE No.
CVE-2008-2905  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  
Phase
Assigned (20080630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358408 33022 CVE-2008-2905 MILW0RM:5808  View
358409 33022 CVE-2008-2905 URL:http://www.milw0rm.com/exploits/5808  View
358410 33022 CVE-2008-2905 BID:29716  View
358411 33022 CVE-2008-2905 URL:http://www.securityfocus.com/bid/29716  View
358412 33022 CVE-2008-2905 SECTRACK:1020295  View
358413 33022 CVE-2008-2905 URL:http://www.securitytracker.com/id?1020295  View
358414 33022 CVE-2008-2905 SECUNIA:30685  View
358415 33022 CVE-2008-2905 URL:http://secunia.com/advisories/30685  View
358416 33022 CVE-2008-2905 XF:mambo-output-file-include(43101)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47900 JVNDB-2008-003210 Clever Copy の results.php における SQL インジェクションの脆弱性 Clever Copy の results.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-2909 33022 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003210.html  View