CVE

Id
39183  
CVE No.
CVE-2009-1748  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) webpages_form or (2) userman_form parameter.  
Phase
Assigned (20090521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430893 39183 CVE-2009-1748 MILW0RM:8745  View
430894 39183 CVE-2009-1748 URL:http://www.milw0rm.com/exploits/8745  View
430895 39183 CVE-2009-1748 BID:35042  View
430896 39183 CVE-2009-1748 URL:http://www.securityfocus.com/bid/35042  View
430897 39183 CVE-2009-1748 OSVDB:54657  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42430 JVNDB-2009-003437 exJune Office Message System における権限を取得される脆弱性 exJune Office Message System は、(1) configure.asp および (2) addmessage2.asp へアクセスを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2009-1752 39183 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003437.html  View