CVE

Id
34836  
CVE No.
CVE-2008-4719  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oe_classpath parameter, a different vector than CVE-2008-4329.  
Phase
Assigned (20081023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
381479 34836 CVE-2008-4719 MILW0RM:6585  View
381480 34836 CVE-2008-4719 URL:http://www.milw0rm.com/exploits/6585  View
381481 34836 CVE-2008-4719 BID:31423  View
381482 34836 CVE-2008-4719 URL:http://www.securityfocus.com/bid/31423  View
381483 34836 CVE-2008-4719 SREASON:4478  View
381484 34836 CVE-2008-4719 URL:http://securityreason.com/securityalert/4478  View
381485 34836 CVE-2008-4719 XF:openengine-filepool-file-include(45482)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49672 JVNDB-2008-004982 Mozilla Firefox におけるクロスサイトスクリプティングの脆弱性 Mozilla Firefox には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-4723 34836 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004982.html  View