CVE

Id
44294  
CVE No.
CVE-2010-1710  
Status
Candidate  
Description
Directory traversal vulnerability in login.php in Siestta 2.0, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the idioma parameter.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
482904 44294 CVE-2010-1710 MISC:http://packetstormsecurity.org/1004-exploits/siestta-lfixss.txt  View
482905 44294 CVE-2010-1710 EXPLOIT-DB:12260  View
482906 44294 CVE-2010-1710 URL:http://www.exploit-db.com/exploits/12260  View
482907 44294 CVE-2010-1710 BID:39526  View
482908 44294 CVE-2010-1710 URL:http://www.securityfocus.com/bid/39526  View
482909 44294 CVE-2010-1710 OSVDB:63837  View
482910 44294 CVE-2010-1710 URL:http://www.osvdb.org/63837  View
482911 44294 CVE-2010-1710 SECUNIA:39453  View
482912 44294 CVE-2010-1710 URL:http://secunia.com/advisories/39453  View
482913 44294 CVE-2010-1710 XF:siestta-login-file-include(57900)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38251 JVNDB-2010-004036 Joomla! 用の Arcade Games コンポーネントにおけるディレクトリトラバーサルの脆弱性 Joomla! 用の Arcade Games (com_arcadegames) コンポーネントには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-1714 44294 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004036.html  View