NVD

Id
3784  
Name
CVE-2008-3922  
Description
awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-04  
Modified Date
2011-09-21  
Seq
2008-3922  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23993 3784 CVE-2008-3922 4218  View
23994 3784 CVE-2008-3922 8259  View
23995 3784 CVE-2008-3922 http://userwww.service.emory.edu/~ekenda2/EMORY-2008-01.txt  View
23996 3784 CVE-2008-3922 17324  View
23997 3784 CVE-2008-3922 6368  View
23998 3784 CVE-2008-3922 20080826 Multiple Vulnerabilities in AWStats Totals  View
23999 3784 CVE-2008-3922 30856  View
24000 3784 CVE-2008-3922 http://www.telartis.nl/xcms/awstats/  View
24001 3784 CVE-2008-3922 ADV-2008-2442  View
24002 3784 CVE-2008-3922 awstatstotals-multisort-command-execution(44712)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50887 JVNDB-2008-006197 AWStats Totals の awstatstotals.php における任意のコードを実行される脆弱性 AWStats Totals の awstatstotals.php は、匿名の PHP 関数を動的に作成される際、multisort 関数がパラメータを使用するため、任意のコードを実行される脆弱性が存在します。 CVE-2008-3922 34035 CVE-2008-3922 3784 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006197.html 2008-09-04 2012-12-20 View