CVE

Id
36079  
CVE No.
CVE-2008-5962  
Status
Candidate  
Description
Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done (GTD) 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the objectname parameter.  
Phase
Assigned (20090123)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395852 36079 CVE-2008-5962 MILW0RM:7344  View
395853 36079 CVE-2008-5962 URL:http://www.milw0rm.com/exploits/7344  View
395854 36079 CVE-2008-5962 BID:32646  View
395855 36079 CVE-2008-5962 URL:http://www.securityfocus.com/bid/32646  View
395856 36079 CVE-2008-5962 SECUNIA:32982  View
395857 36079 CVE-2008-5962 URL:http://secunia.com/advisories/32982  View
395858 36079 CVE-2008-5962 XF:gravitygtd-rpc-file-include(47090)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41770 JVNDB-2009-002777 Globsy の globsy_edit.php における任意のファイルを上書きされる脆弱性 Globsy の globsy_edit.php には、任意のファイルを作成または上書きされる脆弱性が存在します。 CVE-2008-5966 36079 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002777.html  View