CVE

Id
33284  
CVE No.
CVE-2008-3167  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSax3.php and (b) safehtml.php in plugins/safehtml/ and the (2) sIncPath parameter to (c) ray/modules/global/inc/content.inc.php. NOTE: vector 1 might be a problem in SafeHTML instead of Dolphin.  
Phase
Assigned (20080714)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362361 33284 CVE-2008-3167 MILW0RM:6024  View
362362 33284 CVE-2008-3167 URL:http://www.milw0rm.com/exploits/6024  View
362363 33284 CVE-2008-3167 BID:30136  View
362364 33284 CVE-2008-3167 URL:http://www.securityfocus.com/bid/30136  View
362365 33284 CVE-2008-3167 SECUNIA:30981  View
362366 33284 CVE-2008-3167 URL:http://secunia.com/advisories/30981  View
362367 33284 CVE-2008-3167 SECUNIA:30995  View
362368 33284 CVE-2008-3167 URL:http://secunia.com/advisories/30995  View
362369 33284 CVE-2008-3167 SREASON:3993  View
362370 33284 CVE-2008-3167 URL:http://securityreason.com/securityalert/3993  View
362371 33284 CVE-2008-3167 XF:dolphin-multiple-file-include(43647)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47940 JVNDB-2008-003250 Apple Safari における異なる https Web サイトに https URL を含む Referer ヘッダを送信される脆弱性 Apple Safari は、https URL を含む Referer ヘッダを他の https Web サイトに送信するため、重要な情報を取得される脆弱性が存在します。 CVE-2008-3171 33284 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003250.html  View