CVE

Id
37892  
CVE No.
CVE-2009-0457  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in AJA Portal 1.2 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php in the (1) Contact_Plus and (2) Reviews modules, and (3) the module_name parameter to admin/includes/FANCYNLOptions.php in the Fancy_NewsLetter module.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411576 37892 CVE-2009-0457 MILW0RM:7939  View
411577 37892 CVE-2009-0457 URL:http://www.milw0rm.com/exploits/7939  View
411578 37892 CVE-2009-0457 BID:33565  View
411579 37892 CVE-2009-0457 URL:http://www.securityfocus.com/bid/33565  View
411580 37892 CVE-2009-0457 OSVDB:51708  View
411581 37892 CVE-2009-0457 URL:http://osvdb.org/51708  View
411582 37892 CVE-2009-0457 OSVDB:51709  View
411583 37892 CVE-2009-0457 URL:http://osvdb.org/51709  View
411584 37892 CVE-2009-0457 SECUNIA:33735  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44792 JVNDB-2009-005799 Whole Hog Password Protec における認証を回避される脆弱性 Whole Hog Password Protec には、認証を回避される、および管理アクセス権限を取得される脆弱性が存在します。 CVE-2009-0461 37892 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005799.html  View