NVD

Id
52809  
Name
CVE-2007-0585  
Description
include/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote attackers to obtain source code of files via the conffile parameter. NOTE: some of these details are obtained from third party information. It is likely that this issue can be exploited to conduct directory traversal attacks.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-01-30  
Modified Date
2011-03-07  
Seq
2007-0585  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266898 52809 CVE-2007-0585 3222  View
266899 52809 CVE-2007-0585 http://webfwlog.cvs.sourceforge.net/*checkout*/webfwlog/webfwlog/ChangeLog  View
266900 52809 CVE-2007-0585 22291  View
266901 52809 CVE-2007-0585 ADV-2007-0399  View
266902 52809 CVE-2007-0585 webfwlog-debug-file-include(31881)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56339 JVNDB-2007-005031 Webfwlog の include/debug.php におけるファイルのソースコードを取得される脆弱性 Webfwlog の include/debug.php には、register_globals が有効になっている際、ファイルのソースコードを取得される脆弱性が存在します。 CVE-2007-0585 23940 CVE-2007-0585 52809 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005031.html 2007-01-30 2012-12-20 View