JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2008-006263	SPAW Editor PHP Edtion の class/theme.class.php における脆弱性	SPAW Editor PHP Edtion の class/theme.class.php は、テーマ名の中にディレクトリトラバーサルシーケンスに関する不備があるため、不特定の影響を受ける脆弱性が存在します。	CVE-2008-4358	10	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006263.html	2008-09-30	2012-12-20	View
JVNDB-2008-004901	lighttpd におけるデータを変更される脆弱性	lighttpd は、URL の解読を実行する前に (1) url.redirect および (2) url.rewrite 設定パターンに対する URI を比較するため、アクセス制限を回避される、重要な情報を取得される、またはデータを変更される脆弱性が存在します。	CVE-2008-4359	7.5	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004901.html	2008-10-03	2012-09-25	View
JVNDB-2008-004902	lighttpd の mod_userdir におけるアクセス制限を回避される脆弱性	lighttpd の mod_userdir には、大文字と小文字を区別しない OS またはファイルシステムが使用されている際、設定オプションのファイル名コンポーネントで大文字と小文字の比較が実行されるため、アクセス制限を回避される脆弱性が存在します。	CVE-2008-4360	7.8	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004902.html	2008-10-03	2012-09-25	View
JVNDB-2008-006264	PowerPortal におけるディレクトリトラバーサルの脆弱性	PowerPortal には、ディレクトリトラバーサルの脆弱性が存在します。	CVE-2008-4361	7.8	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006264.html	2008-09-30	2012-12-20	View
JVNDB-2008-003482	DESlock+ の Virtual Token ドライバにおけるサービス運用妨害 (DoS) の脆弱性	DESlock+ の Virtual Token ドライバ (vdlptokn.sys) には、サービス運用妨害 (システムクラッシュ) 状態となる脆弱性が存在します。	CVE-2008-4362	4.9	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003482.html	2008-09-30	2012-06-26	View

Page 4394 of 13768, showing 5 records out of 68839 total, starting on record 21966, ending on 21970

<<first <prev 4390 | 4391 | 4392 | 4393 | 4394 | 4395 | 4396 | 4397 | 4398 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page4394
  sortcveinfo_id
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page4394
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cveinfo_idasc
  limit5
  options(array)
  page4394
  order(array)
  Jvninfo.cveinfo_idasc
  sortcveinfo_id
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.86 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.29 MB
View render complete	2.79 MB

Timers

Total Request Time: 185 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.97
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	164.20
Event: Controller.beforeRender	5.92
» Processing toolbar data	5.83
Rendering View	6.94
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.82
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.69
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id50953
  nameJVNDB-2008-006263
  titleSPAW Editor PHP Edtion の class/theme.class.php における脆弱性
  summarySPAW Editor PHP Edtion の class/theme.class.php は、テーマ名の中にディレクトリトラバーサルシーケンスに関する不備があるため、不特定の影響を受ける脆弱性が存在します。
  cveinfo_nameCVE-2008-4358
  cveinfo_id34471
  nvdinfo_nameCVE-2008-4358
  nvdinfo_id4186
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006263.html
  published_date2008-09-30
  registered_date2012-12-20
  last_updated_date2012-12-20
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id34471
  nameCVE-2008-4354
  statusCandidate
  descriptionSQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.
  phaseAssigned (20080930)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id4186
  nameCVE-2008-4358
  descriptionUnspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-03
  published2008-09-30
  modified_date2009-08-19
  typeCVE
  seq2008-4358
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id49591
  nameJVNDB-2008-004901
  titlelighttpd におけるデータを変更される脆弱性
  summarylighttpd は、URL の解読を実行する前に (1) url.redirect および (2) url.rewrite 設定パターンに対する URI を比較するため、アクセス制限を回避される、重要な情報を取得される、またはデータを変更される脆弱性が存在します。
  cveinfo_nameCVE-2008-4359
  cveinfo_id34472
  nvdinfo_nameCVE-2008-4359
  nvdinfo_id4187
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004901.html
  published_date2008-10-03
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id34472
  nameCVE-2008-4355
  statusCandidate
  descriptionSQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum (aka PHP Forum or pForum) 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
  phaseAssigned (20080930)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id4187
  nameCVE-2008-4359
  descriptionlighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-03
  published2008-10-03
  modified_date2011-03-07
  typeCVE
  seq2008-4359
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id49592
  nameJVNDB-2008-004902
  titlelighttpd の mod_userdir におけるアクセス制限を回避される脆弱性
  summarylighttpd の mod_userdir には、大文字と小文字を区別しない OS またはファイルシステムが使用されている際、設定オプションのファイル名コンポーネントで大文字と小文字の比較が実行されるため、アクセス制限を回避される脆弱性が存在します。
  cveinfo_nameCVE-2008-4360
  cveinfo_id34473
  nvdinfo_nameCVE-2008-4360
  nvdinfo_id4188
  cvssv27.8
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004902.html
  published_date2008-10-03
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id34473
  nameCVE-2008-4356
  statusCandidate
  descriptionMultiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View action to the News module; (2) the vid parameter to index.php in a Result action to the Voting module; (3) the fid parameter to index.php in a ShowForum action to the Forum module; (4) the tid parameter to index.php in a ShowTopic action to the Forum module; (5) the uname parameter to index.php in a UserInfo action to the Account module; or (6) the module parameter to index.php, probably related to the TopSites module.
  phaseAssigned (20080930)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id4188
  nameCVE-2008-4360
  descriptionmod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a .PHP file when there is a configuration rule for .php files.
  reject(null)
  CVSS_version2
  CVSS_score7.8
  severityHigh
  CVSS_base_score7.8
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:N/A:N)
  sourcecve
  pub_date2017-01-03
  published2008-10-03
  modified_date2011-03-07
  typeCVE
  seq2008-4360
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id50954
  nameJVNDB-2008-006264
  titlePowerPortal におけるディレクトリトラバーサルの脆弱性
  summaryPowerPortal には、ディレクトリトラバーサルの脆弱性が存在します。
  cveinfo_nameCVE-2008-4361
  cveinfo_id34474
  nvdinfo_nameCVE-2008-4361
  nvdinfo_id4189
  cvssv27.8
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006264.html
  published_date2008-09-30
  registered_date2012-12-20
  last_updated_date2012-12-20
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id34474
  nameCVE-2008-4357
  statusCandidate
  descriptionSQL injection vulnerability in linkto.php in Powie pLink 2.07 allows remote attackers to execute arbitrary SQL commands via the id parameter.
  phaseAssigned (20080930)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id4189
  nameCVE-2008-4361
  descriptionDirectory traversal vulnerability in PowerPortal 2.0.13 allows remote attackers to list and possibly read arbitrary files via a .. (dot dot) in the path parameter to the default URI.
  reject(null)
  CVSS_version2
  CVSS_score7.8
  severityHigh
  CVSS_base_score7.8
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:N/A:N)
  sourcecve
  pub_date2017-01-03
  published2008-09-30
  modified_date2012-10-29
  typeCVE
  seq2008-4361
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id48172
  nameJVNDB-2008-003482
  titleDESlock+ の Virtual Token ドライバにおけるサービス運用妨害 (DoS) の脆弱性
  summaryDESlock+ の Virtual Token ドライバ (vdlptokn.sys) には、サービス運用妨害 (システムクラッシュ) 状態となる脆弱性が存在します。
  cveinfo_nameCVE-2008-4362
  cveinfo_id34475
  nvdinfo_nameCVE-2008-4362
  nvdinfo_id4190
  cvssv24.9
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003482.html
  published_date2008-09-30
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id34475
  nameCVE-2008-4358
  statusCandidate
  descriptionUnspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name.
  phaseAssigned (20080930)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id4190
  nameCVE-2008-4362
  descriptionThe Virtual Token driver (vdlptokn.sys) 1.0.2.43 in DESlock+ 3.2.7 allows local users to cause a denial of service (system crash) via a crafted IOCTL request to DeviceDLPTokenWalter0.
  reject(null)
  CVSS_version2
  CVSS_score4.9
  severityMedium
  CVSS_base_score4.9
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-03
  published2008-09-30
  modified_date2011-03-07
  typeCVE
  seq2008-4362
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:4394/sort:cveinfo_id/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:4394/sort:cveinfo_id/direction:asc
Remote Port	61837
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.144
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.2.95.181
Http Via	1.1 squid-proxy-5b5d847c96-rxkx6 (squid/6.10)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectharddos	1
Suspectdos	1
X Dostranslated Ip	216.73.216.144
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.144
Unique Id	aNsGZ8Iof0nJnMRQquBxdAAAABc
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectharddos	1
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.144
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.144
Redirect Unique Id	aNsGZ8Iof0nJnMRQquBxdAAAABc
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectharddos	1
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.144
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.144
Redirect Redirect Unique Id	aNsGZ8Iof0nJnMRQquBxdAAAABc
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1759184487.1838
Request Time	1759184487

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====