CVE

Id
39653  
CVE No.
CVE-2009-2218  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, or (4) house/myrents.php; or (5) allbooks.php, (6) home.php, or (7) mybooks.php in books/. NOTE: house/myrents.php was also separately reported as a local file inclusion issue.  
Phase
Assigned (20090625)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436104 39653 CVE-2009-2218 MILW0RM:9008  View
436105 39653 CVE-2009-2218 URL:http://www.milw0rm.com/exploits/9008  View
436106 39653 CVE-2009-2218 SECUNIA:35452  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39961 JVNDB-2009-000046 レッツPHP! 製 PHP-I-BOARD におけるディレクトリトラバーサルの脆弱性 レッツPHP! が提供する PHP-I-BOARD には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-2222 39653 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html  View