CVE

Id
33516  
CVE No.
CVE-2008-3399  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the include_directory parameter.  
Phase
Assigned (20080731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
364916 33516 CVE-2008-3399 BUGTRAQ:20080725 XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities  View
364917 33516 CVE-2008-3399 URL:http://www.securityfocus.com/archive/1/archive/1/494754/100/0/threaded  View
364918 33516 CVE-2008-3399 MILW0RM:6131  View
364919 33516 CVE-2008-3399 URL:http://www.milw0rm.com/exploits/6131  View
364920 33516 CVE-2008-3399 SREASON:4081  View
364921 33516 CVE-2008-3399 URL:http://securityreason.com/securityalert/4081  View
364922 33516 CVE-2008-3399 XF:xrmscrm-workflowactivities-file-include(43992)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49389 JVNDB-2008-004699 MojoPersonals の mojoClassified.cgi における SQL インジェクションの脆弱性 MojoPersonals の mojoClassified.cgi には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3403 33516 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004699.html  View