CVE

Id
36070  
CVE No.
CVE-2008-5953  
Status
Candidate  
Description
Directory traversal vulnerability in KTP Computer Customer Database (KTPCCD) CMS, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to the default URI.  
Phase
Assigned (20090123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395793 36070 CVE-2008-5953 MILW0RM:7304  View
395794 36070 CVE-2008-5953 URL:http://www.milw0rm.com/exploits/7304  View
395795 36070 CVE-2008-5953 BID:33518  View
395796 36070 CVE-2008-5953 URL:http://www.securityfocus.com/bid/33518  View
395797 36070 CVE-2008-5953 VUPEN:ADV-2008-3292  View
395798 36070 CVE-2008-5953 URL:http://www.vupen.com/english/advisories/2008/3292  View
395799 36070 CVE-2008-5953 SECUNIA:32888  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43071 JVNDB-2009-004078 Joomla! 用の Mydyngallery コンポーネントにおける SQL インジェクションの脆弱性 Joomla! 用の Mydyngallery (com_mydyngallery) コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2008-5957 36070 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004078.html  View