NVD

Id
57269  
Name
CVE-2007-5186  
Description
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497. NOTE: this issue was disputed, but the dispute was retracted after additional analysis.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-10-03  
Modified Date
2011-08-22  
Seq
2007-5186  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292412 57269 CVE-2007-5186 http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=543854  View
292413 57269 CVE-2007-5186 20071001 Bogus: Segue CMS <= 1.8.4 index.php Remote File Inclusion Vulnerability  View
292414 57269 CVE-2007-5186 20071001 Bogus: Segue CMS <= 1.8.4 index.php Remote File Inclusion Vulnerability  View
292415 57269 CVE-2007-5186 4476  View
292416 57269 CVE-2007-5186 25889  View
292417 57269 CVE-2007-5186 ADV-2007-3342  View
292418 57269 CVE-2007-5186 segue-index-file-include(36903)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57478 JVNDB-2007-006170 Segue CMS の index.php における PHP リモートファイルインクルージョンの脆弱性 Segue CMS の index.php には、register_globals が無効になっている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-5186 28541 CVE-2007-5186 57269 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006170.html 2007-10-03 2012-12-20 View