CVE

Id
39395  
CVE No.
CVE-2009-1960  
Status
Candidate  
Description
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.  
Phase
Assigned (20090606)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
434013 39395 CVE-2009-1960 MILW0RM:8781  View
434014 39395 CVE-2009-1960 URL:http://www.milw0rm.com/exploits/8781  View
434015 39395 CVE-2009-1960 MILW0RM:8812  View
434016 39395 CVE-2009-1960 URL:http://www.milw0rm.com/exploits/8812  View
434017 39395 CVE-2009-1960 CONFIRM:http://bugs.splitbrain.org/index.php?do=details&task_id=1700  View
434018 39395 CVE-2009-1960 CONFIRM:http://dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki;a=commitdiff;h=20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz  View
434019 39395 CVE-2009-1960 BID:35095  View
434020 39395 CVE-2009-1960 URL:http://www.securityfocus.com/bid/35095  View
434021 39395 CVE-2009-1960 SECUNIA:35218  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41265 JVNDB-2009-002272 Oracle Database の Workspace Manager コンポーネントにおける脆弱性 Oracle Database の Workspace Manager コンポーネントには、機密性および完全性に影響のある脆弱性が存在します。 CVE-2009-1964 39395 5.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002272.html  View