CVE

Id
36603  
CVE No.
CVE-2008-6486  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_dir] parameter.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
399367 36603 CVE-2008-6486 BUGTRAQ:20081101 sharedlog CMS Remote File Includes  View
399368 36603 CVE-2008-6486 URL:http://www.securityfocus.com/archive/1/archive/1/497978/100/0/threaded  View
399369 36603 CVE-2008-6486 BID:32035  View
399370 36603 CVE-2008-6486 URL:http://www.securityfocus.com/bid/32035  View
399371 36603 CVE-2008-6486 OSVDB:51911  View
399372 36603 CVE-2008-6486 URL:http://osvdb.org/51911  View
399373 36603 CVE-2008-6486 XF:sharedlog-slideshowuploadvideo-file-include(46293)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41929 JVNDB-2009-002936 FLABER の function/update_xml.php における任意のファイルを上書きされる脆弱性 FLABER の function/update_xml.php には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-6490 36603 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002936.html  View