CVE

Id
40943  
CVE No.
CVE-2009-3508  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in MUJE CMS 1.0.4.34 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) _class parameter to admin.php and the (2) url parameter to install/install.php; and allow remote authenticated administrators to read arbitrary files via a .. (dot dot) in the (3) _htmlfile parameter to admin.php.  
Phase
Assigned (20091001)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448371 40943 CVE-2009-3508 MILW0RM:9314  View
448372 40943 CVE-2009-3508 URL:http://www.milw0rm.com/exploits/9314  View
448373 40943 CVE-2009-3508 SECUNIA:36079  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45368 JVNDB-2009-006375 MyWeight におけるクロスサイトスクリプティングの脆弱性 MyWeight には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-3512 40943 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006375.html  View