CVE

Id
38923  
CVE No.
CVE-2009-1488  
Status
Candidate  
Description
Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to index.php.  
Phase
Assigned (20090429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

-->
Id CVE Id CVE No. Reference Actions
427367 38923 CVE-2009-1488 BUGTRAQ:20090420 Multiple Remote Vulnerabilities--SQLi-(INSECURE-COOKIE-HANDLING)-LFI-->  View
427368 38923 CVE-2009-1488 URL:http://marc.info/?l=bugtraq&m=124025031126068&w=2  View
427369 38923 CVE-2009-1488 MILW0RM:8493  View
427370 38923 CVE-2009-1488 URL:http://www.milw0rm.com/exploits/8493  View
427371 38923 CVE-2009-1488 BID:34610  View
427372 38923 CVE-2009-1488 URL:http://www.securityfocus.com/bid/34610  View
427373 38923 CVE-2009-1488 VUPEN:ADV-2009-1117  View
427374 38923 CVE-2009-1488 URL:http://www.vupen.com/english/advisories/2009/1117  View
427375 38923 CVE-2009-1488 XF:fungamez-index-file-include(50091)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40281 JVNDB-2009-001287 Adobe Reader および Acrobat の JavaScript API における任意のコードを実行される脆弱性 Adobe Reader および Acrobat の JavaScript API における getAnnots Doc メソッドには、PDF ファイルの処理に不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-1492 38923 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001287.html  View