CVE

Id
38164  
CVE No.
CVE-2009-0729  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20090224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
415167 38164 CVE-2009-0729 BID:33860  View
415168 38164 CVE-2009-0729 URL:http://www.securityfocus.com/bid/33860  View
415169 38164 CVE-2009-0729 OSVDB:52175  View
415170 38164 CVE-2009-0729 URL:http://osvdb.org/52175  View
415171 38164 CVE-2009-0729 OSVDB:52176  View
415172 38164 CVE-2009-0729 URL:http://osvdb.org/52176  View
415173 38164 CVE-2009-0729 OSVDB:52177  View
415174 38164 CVE-2009-0729 URL:http://osvdb.org/52177  View
415175 38164 CVE-2009-0729 OSVDB:52178  View
415176 38164 CVE-2009-0729 URL:http://osvdb.org/52178  View
415177 38164 CVE-2009-0729 SECUNIA:33983  View
415178 38164 CVE-2009-0729 URL:http://secunia.com/advisories/33983  View
415179 38164 CVE-2009-0729 XF:pageengine-fprefix-file-include(48856)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40128 JVNDB-2009-001134 LittleCMS におけるバッファオーバーフローの脆弱性 LittleCMS の ReadSetOfCurves 関数には、画像ファイルの処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0733 38164 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001134.html  View