CVE

Id
47865  
CVE No.
CVE-2010-5281  
Status
Candidate  
Description
Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20121126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
520371 47865 CVE-2010-5281 MISC:http://packetstormsecurity.org/1009-exploits/cmscout209-lfi.txt  View
520372 47865 CVE-2010-5281 MISC:http://www.johnleitch.net/Vulnerabilities/CMScout.2.09.IBrowser.TinyMCE.Plugin.Local.File.Inclusion/33  View
520373 47865 CVE-2010-5281 OSVDB:68247  View
520374 47865 CVE-2010-5281 URL:http://www.osvdb.org/68247  View
520375 47865 CVE-2010-5281 SECUNIA:41634  View
520376 47865 CVE-2010-5281 URL:http://secunia.com/advisories/41634  View
520377 47865 CVE-2010-5281 XF:ibrowser-ibrowser-file-include(62066)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29853 JVNDB-2012-005560 Collabtive の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 Collabtive の admin.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2010-5285 47865 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005560.html  View