CVE

Id
37100  
CVE No.
CVE-2008-6983  
Status
Candidate  
Description
modules/tool/hitcounter.php in devalcms 1.4a allows remote attackers to execute arbitrary PHP code via the HTTP Referer header with a target file specified in the gv_folder_data parameter, as demonstrated by modifying modules/tool/url2header.php.  
Phase
Assigned (20090817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403167 37100 CVE-2008-6983 MILW0RM:6369  View
403168 37100 CVE-2008-6983 URL:http://www.milw0rm.com/exploits/6369  View
403169 37100 CVE-2008-6983 BID:31037  View
403170 37100 CVE-2008-6983 URL:http://www.securityfocus.com/bid/31037  View
403171 37100 CVE-2008-6983 OSVDB:47972  View
403172 37100 CVE-2008-6983 URL:http://osvdb.org/47972  View
403173 37100 CVE-2008-6983 XF:devalcms-url2header-code-execution(44942)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42071 JVNDB-2009-003078 eZoneScripts Dating Website script における任意のコードを実行される脆弱性 eZoneScripts Dating Website script には、任意のコードを実行される脆弱性が存在します。 CVE-2008-6987 37100 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003078.html  View