CVE

Id
36865  
CVE No.
CVE-2008-6748  
Status
Candidate  
Description
Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.  
Phase
Assigned (20090424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401412 36865 CVE-2008-6748 BUGTRAQ:20081230 Megacubo 5.0.7 (mega://) remote eval() injection exploit  View
401413 36865 CVE-2008-6748 URL:http://www.securityfocus.com/archive/1/archive/1/499654/100/0/threaded  View
401414 36865 CVE-2008-6748 MILW0RM:7623  View
401415 36865 CVE-2008-6748 URL:http://www.milw0rm.com/exploits/7623  View
401416 36865 CVE-2008-6748 MISC:http://retrogod.altervista.org/9sg_megacubo.html  View
401417 36865 CVE-2008-6748 BID:33062  View
401418 36865 CVE-2008-6748 URL:http://www.securityfocus.com/bid/33062  View
401419 36865 CVE-2008-6748 OSVDB:51106  View
401420 36865 CVE-2008-6748 URL:http://osvdb.org/51106  View
401421 36865 CVE-2008-6748 SECUNIA:33326  View
401422 36865 CVE-2008-6748 URL:http://secunia.com/advisories/33326  View
401423 36865 CVE-2008-6748 XF:megacubo-mega-command-execution(47697)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44562 JVNDB-2009-005569 ReVou Micro Blogging 用の TClone プラグインにおける管理者のパスワードを変更される脆弱性 ReVou Micro Blogging 用の Twitter Clone (TClone) プラグインの adminlogin/password.php は、パスワードの変更前に従来のパスワードを確認しないため、管理者のパスワードを変更される、および権限を取得される脆弱性が存在します。 CVE-2008-6752 36865 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005569.html  View