CVE

Id
34323  
CVE No.
CVE-2008-4206  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.  
Phase
Assigned (20080924)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
375898 34323 CVE-2008-4206 BUGTRAQ:20080916 [ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities  View
375899 34323 CVE-2008-4206 URL:http://www.securityfocus.com/archive/1/archive/1/496427/100/0/threaded  View
375900 34323 CVE-2008-4206 MILW0RM:6468  View
375901 34323 CVE-2008-4206 URL:http://www.milw0rm.com/exploits/6468  View
375902 34323 CVE-2008-4206 MISC:http://e-rdc.org/v1/news.php?readmore=108  View
375903 34323 CVE-2008-4206 BID:31207  View
375904 34323 CVE-2008-4206 URL:http://www.securityfocus.com/bid/31207  View
375905 34323 CVE-2008-4206 OSVDB:48269  View
375906 34323 CVE-2008-4206 URL:http://osvdb.org/48269  View
375907 34323 CVE-2008-4206 SECUNIA:31794  View
375908 34323 CVE-2008-4206 URL:http://secunia.com/advisories/31794  View
375909 34323 CVE-2008-4206 SREASON:4307  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46615 JVNDB-2008-001925 Linux Kernel の fs/open.c における権限昇格の脆弱性 Linux Kernel の fs/open.c には、ファイルへの書き込みがある場合に、setuid および setgid ビットの除去処理に不備があるため、異なるグループの権限を取得される脆弱性が存在します。 CVE-2008-4210 34323 4.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001925.html  View