CVE

Id
33792  
CVE No.
CVE-2008-3675  
Status
Candidate  
Description
Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a .. (dot dot) and possibly (2) a full pathname in the img parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20080814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368560 33792 CVE-2008-3675 MILW0RM:6235  View
368561 33792 CVE-2008-3675 URL:http://www.milw0rm.com/exploits/6235  View
368562 33792 CVE-2008-3675 BID:30672  View
368563 33792 CVE-2008-3675 URL:http://www.securityfocus.com/bid/30672  View
368564 33792 CVE-2008-3675 SECUNIA:31456  View
368565 33792 CVE-2008-3675 URL:http://secunia.com/advisories/31456  View
368566 33792 CVE-2008-3675 SREASON:4154  View
368567 33792 CVE-2008-3675 URL:http://securityreason.com/securityalert/4154  View
368568 33792 CVE-2008-3675 XF:gelatocms-imgsize-directory-traversal(44416)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49449 JVNDB-2008-004759 IDevSpot PhpLinkExchange の index.php におけるクロスサイトスクリプティングの脆弱性 IDevSpot PhpLinkExchange の index.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-3679 33792 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004759.html  View