NVD

Id
5533  
Name
CVE-2008-5793  
Description
Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfig_absolute_path] parameter to (a) install.clickheat.php, (b) Cache.php and (c) Clickheat_Heatmap.php in Recly/Clickheat/, and (d) Recly/common/GlobalVariables.php; and the (2) mosConfig_absolute_path parameter to (e) _main.php and (f) main.php in includes/heatmap, and (g) includes/overview/main.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-12-31  
Modified Date
2009-01-29  
Seq
2008-5793  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34479 5533 CVE-2008-5793 4841  View
34480 5533 CVE-2008-5793 7038  View
34481 5533 CVE-2008-5793 32190  View
34482 5533 CVE-2008-5793 clickheat-multiple-scripts-file-include(46439)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51300 JVNDB-2008-006610 Joomla! 用の clickheat コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 Joomla! 用の Clickheat - Heatmap stats (com_clickheat) コンポーネントには、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-5793 35906 CVE-2008-5793 5533 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006610.html 2008-12-31 2012-12-20 View