CVE

Id
33283  
CVE No.
CVE-2008-3166  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter.  
Phase
Assigned (20080714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362352 33283 CVE-2008-3166 MILW0RM:6028  View
362353 33283 CVE-2008-3166 URL:http://www.milw0rm.com/exploits/6028  View
362354 33283 CVE-2008-3166 VUPEN:ADV-2008-2033  View
362355 33283 CVE-2008-3166 URL:http://www.vupen.com/english/advisories/2008/2033/references  View
362356 33283 CVE-2008-3166 SECUNIA:30999  View
362357 33283 CVE-2008-3166 URL:http://secunia.com/advisories/30999  View
362358 33283 CVE-2008-3166 SREASON:3994  View
362359 33283 CVE-2008-3166 URL:http://securityreason.com/securityalert/3994  View
362360 33283 CVE-2008-3166 XF:ray-sincpath-file-include(43644)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46900 JVNDB-2008-002210 Apple Safari における HTTP セッションハイジャックの脆弱性 Apple Safari には、co.uk や com.au のようなトップレベルドメインに対してクッキーをセットできるため、セッション固定攻撃や HTTP セッションをハイジャックされる脆弱性が存在します。 CVE-2008-3170 33283 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002210.html  View