CVE

Id
59150  
CVE No.
CVE-2012-5907  
Status
Candidate  
Description
Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter in a "3" action.  
Phase
Assigned (20121117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
603840 59150 CVE-2012-5907 MISC:http://packetstormsecurity.org/files/111291/TomatoCart-1.2.0-Alpha-2-Local-File-Inclusion.html  View
603841 59150 CVE-2012-5907 MISC:http://www.mavitunasecurity.com/local-file-inclusion-vulnerability-in-tomatocart/  View
603842 59150 CVE-2012-5907 BID:52766  View
603843 59150 CVE-2012-5907 URL:http://www.securityfocus.com/bid/52766  View
603844 59150 CVE-2012-5907 OSVDB:80689  View
603845 59150 CVE-2012-5907 URL:http://osvdb.org/80689  View
603846 59150 CVE-2012-5907 XF:tomatocart-json-file-include(74459)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29700 JVNDB-2012-005407 PicoPublisher における SQL インジェクションの脆弱性 PicoPublisher には、SQL インジェクションの脆弱性が存在します。 CVE-2012-5912 59150 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005407.html  View