NVD

Id
3470  
Name
CVE-2008-3600  
Description
Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter within a modload action.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-12  
Modified Date
2009-03-18  
Seq
2008-3600  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21770 3470 CVE-2008-3600 http://gallery.menalto.com/gallery_1.5.8_released  View
21771 3470 CVE-2008-3600 GLSA-200811-02  View
21772 3470 CVE-2008-3600 4142  View
21773 3470 CVE-2008-3600 6222  View
21774 3470 CVE-2008-3600 20080808 [DSECRG-08-035] Local File Include Vulnerability in Gallery 1.5.7, 1.6-alpha3  View
21775 3470 CVE-2008-3600 gallery-modules-file-include(44373)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49440 JVNDB-2008-004750 Gallery の contrib/phpBB2/modules.php におけるディレクトリトラバーサルの脆弱性 Gallery の contrib/phpBB2/modules.php には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-3600 33713 CVE-2008-3600 3470 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004750.html 2008-08-05 2012-09-25 View