CVE

Id
36599  
CVE No.
CVE-2008-6482  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery (com_treeg) component 1.0 for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_live_site parameter.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
399337 36599 CVE-2008-6482 MILW0RM:6928  View
399338 36599 CVE-2008-6482 URL:http://www.milw0rm.com/exploits/6928  View
399339 36599 CVE-2008-6482 BID:32041  View
399340 36599 CVE-2008-6482 URL:http://www.securityfocus.com/bid/32041  View
399341 36599 CVE-2008-6482 OSVDB:49499  View
399342 36599 CVE-2008-6482 URL:http://osvdb.org/49499  View
399343 36599 CVE-2008-6482 SECUNIA:32520  View
399344 36599 CVE-2008-6482 URL:http://secunia.com/advisories/32520  View
399345 36599 CVE-2008-6482 XF:flashtree-treeg-file-include(46260)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44482 JVNDB-2009-005489 SharedLog の slideshow_uploadvideo.content.php における PHP リモートファイルインクルージョンの脆弱性 SharedLog の slideshow_uploadvideo.content.php には、register_globals が有効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-6486 36599 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005489.html  View