CVE

Id
39172  
CVE No.
CVE-2009-1737  
Status
Candidate  
Description
Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. (dot dot) in the dir parameter.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430809 39172 CVE-2009-1737 MISC:http://hi.baidu.com/hirfire/blog/item/c3c0f6dda3ca47d18d10291a.html  View
430810 39172 CVE-2009-1737 BID:35030  View
430811 39172 CVE-2009-1737 URL:http://www.securityfocus.com/bid/35030  View
430812 39172 CVE-2009-1737 OSVDB:54565  View
430813 39172 CVE-2009-1737 URL:http://www.osvdb.org/54565  View
430814 39172 CVE-2009-1737 SECUNIA:35092  View
430815 39172 CVE-2009-1737 URL:http://secunia.com/advisories/35092  View
430816 39172 CVE-2009-1737 XF:mypic-dir-directory-traversal(50621)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42426 JVNDB-2009-003433 DM FileManager の login.php における SQL インジェクションの脆弱性 DM FileManager の login.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2009-1741 39172 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003433.html  View