CVE

Id
45040  
CVE No.
CVE-2010-2456  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitrary local files via a URL in the (1) cook_lan cookie parameter ($lan_dir variable) or possibly (2) Sdb_type parameter. NOTE: this was originally reported as remote file inclusion, but this may be inaccurate.  
Phase
Assigned (20100625)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
491226 45040 CVE-2010-2456 EXPLOIT-DB:13964  View
491227 45040 CVE-2010-2456 URL:http://www.exploit-db.com/exploits/13964  View
491228 45040 CVE-2010-2456 MISC:http://packetstormsecurity.org/1006-exploits/linkerimg-rfi.txt  View
491229 45040 CVE-2010-2456 VIM:20100625 some discrepancies: Linker IMG <=1.0 RFI  View
491230 45040 CVE-2010-2456 URL:http://www.attrition.org/pipermail/vim/2010-June/002354.html  View
491231 45040 CVE-2010-2456 VUPEN:ADV-2010-1562  View
491232 45040 CVE-2010-2456 URL:http://www.vupen.com/english/advisories/2010/1562  View
491233 45040 CVE-2010-2456 XF:linkerimg-index-file-include(59614)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39112 JVNDB-2010-004897 JCE-Tech SASS の merchant_product_list.php における SQL インジェクションの脆弱性 JCE-Tech Shareasale Script (SASS) の merchant_product_list.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-2460 45040 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004897.html  View