CVE

Id
36066  
CVE No.
CVE-2008-5949  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cct_base parameter to (1) index.php; (2) handle/proxy.php; (3) header.php, (4) include.php, and (5) workspace.php in includes/; and (6) plugins/RSS/files/rss.php.  
Phase
Assigned (20090123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395767 36066 CVE-2008-5949 MILW0RM:7336  View
395768 36066 CVE-2008-5949 URL:http://www.milw0rm.com/exploits/7336  View
395769 36066 CVE-2008-5949 BID:32631  View
395770 36066 CVE-2008-5949 URL:http://www.securityfocus.com/bid/32631  View
395771 36066 CVE-2008-5949 SECUNIA:32995  View
395772 36066 CVE-2008-5949 URL:http://secunia.com/advisories/32995  View
395773 36066 CVE-2008-5949 XF:cctiddly-cctbase-file-include(47072)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43069 JVNDB-2009-004076 KTPCCD CMS におけるディレクトリトラバーサルの脆弱性 KTP Computer Customer Database (KTPCCD) CMS には、magic_quotes_gpc が無効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-5953 36066 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004076.html  View