CVE

Id
36607  
CVE No.
CVE-2008-6490  
Status
Candidate  
Description
function/update_xml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying the target filename in the target_file parameter. NOTE: this can be leveraged for code execution by overwriting a PHP file, as demonstrated using function/upload_file.php.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
399391 36607 CVE-2008-6490 MILW0RM:5407  View
399392 36607 CVE-2008-6490 URL:http://www.milw0rm.com/exploits/5407  View
399393 36607 CVE-2008-6490 VUPEN:ADV-2008-1163  View
399394 36607 CVE-2008-6490 URL:http://www.vupen.com/english/advisories/2008/1163/references  View
399395 36607 CVE-2008-6490 XF:flaber-updatexml-code-execution(41715)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44485 JVNDB-2009-005492 ASP User Engine.NET におけるデータベースをダウンロードされる脆弱性 ASP User Engine.NET は、不十分なアクセスコントロールで Web ルート配下に重要な情報を格納するため、データベースをダウンロードされる脆弱性が存在します。 CVE-2008-6494 36607 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005492.html  View