CVE

Id
33267  
CVE No.
CVE-2008-3150  
Status
Candidate  
Description
Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in (1) usb and (2) del_pag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the intended access restrictions that were implemented in sess.php.  
Phase
Assigned (20080711)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362179 33267 CVE-2008-3150 MILW0RM:6018  View
362180 33267 CVE-2008-3150 URL:http://www.milw0rm.com/exploits/6018  View
362181 33267 CVE-2008-3150 BID:30123  View
362182 33267 CVE-2008-3150 URL:http://www.securityfocus.com/bid/30123  View
362183 33267 CVE-2008-3150 SECUNIA:30950  View
362184 33267 CVE-2008-3150 URL:http://secunia.com/advisories/30950  View
362185 33267 CVE-2008-3150 XF:neutrino-index-code-execution(43616)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50702 JVNDB-2008-006012 WebBlizzard CMS の index.php における SQL インジェクションの脆弱性 WebBlizzard CMS の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3154 33267 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006012.html  View