CVE

Id
33281  
CVE No.
CVE-2008-3164  
Status
Candidate  
Description
Directory traversal vulnerability in blog.php in fuzzylime (cms) 3.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the file parameter. NOTE: it was later reported that 3.01a is also affected.  
Phase
Assigned (20080714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362329 33281 CVE-2008-3164 MILW0RM:6016  View
362330 33281 CVE-2008-3164 URL:http://www.milw0rm.com/exploits/6016  View
362331 33281 CVE-2008-3164 MISC:http://downloads.securityfocus.com/vulnerabilities/exploits/30121.pl  View
362332 33281 CVE-2008-3164 BID:30121  View
362333 33281 CVE-2008-3164 URL:http://www.securityfocus.com/bid/30121  View
362334 33281 CVE-2008-3164 VUPEN:ADV-2008-2015  View
362335 33281 CVE-2008-3164 URL:http://www.vupen.com/english/advisories/2008/2015/references  View
362336 33281 CVE-2008-3164 SECUNIA:30930  View
362337 33281 CVE-2008-3164 URL:http://secunia.com/advisories/30930  View
362338 33281 CVE-2008-3164 XF:fuzzylimecms-content-command-execution(43606)  View
362339 33281 CVE-2008-3164 URL:http://xforce.iss.net/xforce/xfdb/43606  View
362340 33281 CVE-2008-3164 XF:fuzzylimecms-blog-file-include(43939)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47938 JVNDB-2008-003248 Empire Server における PRNG シードを設定される脆弱性 Empire Server のファイルユーティリティは、ワールド作成時間を公開するため、PRNG シードを設定される脆弱性が存在します。 CVE-2008-3168 33281 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003248.html  View