CVE

Id
36368  
CVE No.
CVE-2008-6251  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter.  
Phase
Assigned (20090224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
397802 36368 CVE-2008-6251 MILW0RM:7143  View
397803 36368 CVE-2008-6251 URL:http://www.milw0rm.com/exploits/7143  View
397804 36368 CVE-2008-6251 CONFIRM:http://scripts.ishallnotcare.org/2008/11/18/phpfan-335-security-release-important/  View
397805 36368 CVE-2008-6251 BID:32335  View
397806 36368 CVE-2008-6251 URL:http://www.securityfocus.com/bid/32335  View
397807 36368 CVE-2008-6251 SECUNIA:32734  View
397808 36368 CVE-2008-6251 URL:http://secunia.com/advisories/32734  View
397809 36368 CVE-2008-6251 XF:phpfan-init-file-include(46665)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44416 JVNDB-2009-005423 vBulletin における SQL インジェクションの脆弱性 vBulletin には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6255 36368 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005423.html  View