NVD

Id
274  
Name
CVE-2008-0289  
Description
PHP remote file inclusion vulnerability in view_func.php in Member Area System (MAS) 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the set of affected versions, stating that the issue "is already fixed, for almost a year."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-01-15  
Modified Date
2008-09-05  
Seq
2008-0289  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
1865 274 CVE-2008-0289 3547  View
1866 274 CVE-2008-0289 20080111 Member Area System (MAS) Remote File Include Vulnerability (view_func.php)  View
1867 274 CVE-2008-0289 20080118 Re: Member Area System (MAS) Remote File Include Vulnerability (view_func.php)  View
1868 274 CVE-2008-0289 27244  View
1869 274 CVE-2008-0289 mas-viewfunc-file-include(39611)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48642 JVNDB-2008-003952 MAS の view_func.php における PHP リモートファイルインクルージョンの脆弱性 Member Area System (MAS) の view_func.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-0289 30402 CVE-2008-0289 274 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003952.html 2008-01-15 2012-09-25 View