CVE

Id
33880  
CVE No.
CVE-2008-3763  
Status
Candidate  
Description
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when register_globals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file.  
Phase
Assigned (20080821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
369581 33880 CVE-2008-3763 BUGTRAQ:20080816 PHP Live Helper <= 2.0.1 Multiple Vulnerabilities  View
369582 33880 CVE-2008-3763 URL:http://www.securityfocus.com/archive/1/archive/1/495542/100/0/threaded  View
369583 33880 CVE-2008-3763 MILW0RM:6261  View
369584 33880 CVE-2008-3763 URL:http://www.milw0rm.com/exploits/6261  View
369585 33880 CVE-2008-3763 MISC:http://demos.turnkeywebtools.com/phplivehelper/docs/change_log.txt  View
369586 33880 CVE-2008-3763 MISC:http://www.gulftech.org/?node=research&article_id=00124-08162008  View
369587 33880 CVE-2008-3763 BID:30729  View
369588 33880 CVE-2008-3763 URL:http://www.securityfocus.com/bid/30729  View
369589 33880 CVE-2008-3763 SECUNIA:31521  View
369590 33880 CVE-2008-3763 URL:http://secunia.com/advisories/31521  View
369591 33880 CVE-2008-3763 SREASON:4178  View
369592 33880 CVE-2008-3763 URL:http://securityreason.com/securityalert/4178  View
369593 33880 CVE-2008-3763 XF:phplivehelper-libsecure-code-execution(44570)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50863 JVNDB-2008-006173 phpBazar の classified.php における SQL インジェクションの脆弱性 phpBazar の classified.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3767 33880 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006173.html  View