CVE

Id
33532  
CVE No.
CVE-2008-3415  
Status
Candidate  
Description
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP sequences.  
Phase
Assigned (20080731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365071 33532 CVE-2008-3415 MILW0RM:6142  View
365072 33532 CVE-2008-3415 URL:http://www.milw0rm.com/exploits/6142  View
365073 33532 CVE-2008-3415 CONFIRM:http://www.cmscout.co.za/index.php?page=news&id=29  View
365074 33532 CVE-2008-3415 BID:30385  View
365075 33532 CVE-2008-3415 URL:http://www.securityfocus.com/bid/30385  View
365076 33532 CVE-2008-3415 VUPEN:ADV-2008-2218  View
365077 33532 CVE-2008-3415 URL:http://www.vupen.com/english/advisories/2008/2218/references  View
365078 33532 CVE-2008-3415 SECUNIA:31243  View
365079 33532 CVE-2008-3415 URL:http://secunia.com/advisories/31243  View
365080 33532 CVE-2008-3415 SREASON:4093  View
365081 33532 CVE-2008-3415 URL:http://securityreason.com/securityalert/4093  View
365082 33532 CVE-2008-3415 XF:cmscout-common-file-include(44017)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48011 JVNDB-2008-003321 Youtuber Clone の ugroups.php における SQL インジェクションの脆弱性 Youtuber Clone の ugroups.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3419 33532 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003321.html  View