CVE

Id
42987  
CVE No.
CVE-2010-0403  
Status
Candidate  
Description
Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
468389 42987 CVE-2010-0403 BUGTRAQ:20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404)  View
468390 42987 CVE-2010-0403 URL:http://www.securityfocus.com/archive/1/archive/1/511299/100/0/threaded  View
468391 42987 CVE-2010-0403 MLIST:[phpgroupware-users] 20100512 Phpgroupware security release 0.9.16.016  View
468392 42987 CVE-2010-0403 URL:http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html  View
468393 42987 CVE-2010-0403 CONFIRM:http://download.phpgroupware.org/  View
468394 42987 CVE-2010-0403 CONFIRM:http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0  View
468395 42987 CVE-2010-0403 DEBIAN:DSA-2046  View
468396 42987 CVE-2010-0403 URL:http://www.debian.org/security/2010/dsa-2046  View
468397 42987 CVE-2010-0403 BID:40167  View
468398 42987 CVE-2010-0403 URL:http://www.securityfocus.com/bid/40167  View
468399 42987 CVE-2010-0403 SECUNIA:39665  View
468400 42987 CVE-2010-0403 URL:http://secunia.com/advisories/39665  View
468401 42987 CVE-2010-0403 SECUNIA:39731  View
468402 42987 CVE-2010-0403 URL:http://secunia.com/advisories/39731  View
468403 42987 CVE-2010-0403 VUPEN:ADV-2010-1145  View
468404 42987 CVE-2010-0403 URL:http://www.vupen.com/english/advisories/2010/1145  View
468405 42987 CVE-2010-0403 VUPEN:ADV-2010-1146  View
468406 42987 CVE-2010-0403 URL:http://www.vupen.com/english/advisories/2010/1146  View
468407 42987 CVE-2010-0403 XF:phpgroupware-about-file-include(58657)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36027 JVNDB-2010-001807 MUSCLE PCSC-Lite の MSGFunctionDemarshall 関数におけるバッファオーバーフロー脆弱性 MUSCLE PCSC-Lite の PC/SC Smart Card daemon の winscard_svc.c 内にある MSGFunctionDemarshall 関数には、バッファオーバーフローの脆弱性が存在します。 CVE-2010-0407 42987 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001807.html  View