CVE

Id
36786  
CVE No.
CVE-2008-6669  
Status
Candidate  
Description
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.  
Phase
Assigned (20090407)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
400755 36786 CVE-2008-6669 MILW0RM:5856  View
400756 36786 CVE-2008-6669 URL:http://www.milw0rm.com/exploits/5856  View
400757 36786 CVE-2008-6669 BID:29804  View
400758 36786 CVE-2008-6669 URL:http://www.securityfocus.com/bid/29804  View
400759 36786 CVE-2008-6669 XF:nweb2fax-viewrq-command-execution(43174)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44532 JVNDB-2009-005539 QuickerSite の asp/bs_login.asp における admin パスワードを変更される脆弱性 QuickerSite の asp/bs_login.asp は、管理機能へのアクセス権を適切に制限しないため、下記の脆弱性が存在します。 CVE-2008-6673 36786 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005539.html  View