CVE

Id
36082  
CVE No.
CVE-2008-5965  
Status
Candidate  
Description
Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. (dot dot) in the page parameter.  
Phase
Assigned (20090126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
395879 36082 CVE-2008-5965 MILW0RM:6737  View
395880 36082 CVE-2008-5965 URL:http://www.milw0rm.com/exploits/6737  View
395881 36082 CVE-2008-5965 BID:31730  View
395882 36082 CVE-2008-5965 URL:http://www.securityfocus.com/bid/31730  View
395883 36082 CVE-2008-5965 SECUNIA:30472  View
395884 36082 CVE-2008-5965 URL:http://secunia.com/advisories/30472  View
395885 36082 CVE-2008-5965 VUPEN:ADV-2008-2798  View
395886 36082 CVE-2008-5965 URL:http://www.vupen.com/english/advisories/2008/2798  View
395887 36082 CVE-2008-5965 XF:lokicms-index-directory-traversal(45822)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44331 JVNDB-2009-005338 Sunbyte e-Flower の popupproduct.php における SQL インジェクションの脆弱性 Sunbyte e-Flower の popupproduct.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-5969 36082 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005338.html  View