NVD

Id
54597  
Name
CVE-2007-2430  
Description
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-07  
Published
2007-05-01  
Modified Date
2016-08-26  
Seq
2007-2430  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276873 54597 CVE-2007-2430 http://sourceforge.net/forum/forum.php?forum_id=690912  View
276874 54597 CVE-2007-2430 20070501 TCExam code injection: why does this work? (and vendor ACK)  View
276875 54597 CVE-2007-2430 3816  View
276876 54597 CVE-2007-2430 23705  View
276877 54597 CVE-2007-2430 ADV-2007-1583  View
276878 54597 CVE-2007-2430 tcexam-sessionuserlang-file-upload(33958)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56803 JVNDB-2007-005495 TCExam の shared/code/tce_tmx.php における cache/ 配下の任意の PHP ファイルを作成される脆弱性 TCExam の shared/code/tce_tmx.php には、cache/ 配下の任意の PHP ファイルを作成される脆弱性が存在します。 CVE-2007-2430 25785 CVE-2007-2430 54597 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005495.html 2007-05-01 2012-12-20 View