CVE

Id
38405  
CVE No.
CVE-2009-0970  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
419171 38405 CVE-2009-0970 BID:34145  View
419172 38405 CVE-2009-0970 URL:http://www.securityfocus.com/bid/34145  View
419173 38405 CVE-2009-0970 OSVDB:52750  View
419174 38405 CVE-2009-0970 URL:http://www.osvdb.org/52750  View
419175 38405 CVE-2009-0970 SECUNIA:34278  View
419176 38405 CVE-2009-0970 URL:http://secunia.com/advisories/34278  View
419177 38405 CVE-2009-0970 XF:phpprobid-classimage-file-include(49290)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40236 JVNDB-2009-001242 Oracle Application Server の Portal コンポーネントにおける脆弱性 Oracle Application Server の Portal コンポーネントには、完全性に影響のある脆弱性が存在します。 CVE-2009-0974 38405 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001242.html  View