NVD

Id
49222  
Name
CVE-2009-1960  
Description
inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-07  
Modified Date
2009-06-23  
Seq
2009-1960  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249282 49222 CVE-2009-1960 http://bugs.splitbrain.org/index.php?do=details&task_id=1700  View
249283 49222 CVE-2009-1960 http://dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki;a=commitdiff;h=20090526145030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz  View
249284 49222 CVE-2009-1960 8781  View
249285 49222 CVE-2009-1960 8812  View
249286 49222 CVE-2009-1960 35095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42478 JVNDB-2009-003485 DokuWiki の inc/init.php における任意のローカルファイルをインクルードされる脆弱性 DokuWiki の inc/init.php には、register_globals が有効になっている際、任意のローカルファイルをインクルードおよび実行される脆弱性が存在します。 CVE-2009-1960 39391 CVE-2009-1960 49222 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003485.html 2009-06-07 2012-06-26 View