NVD

Id
58543  
Name
CVE-2007-6548  
Description
Multiple direct static code injection vulnerabilities in RunCMS before 1.6.1 allow remote authenticated administrators to inject arbitrary PHP code via the (1) header and (2) footer parameters to modules/system/admin.php in a meta-generator action, (3) the disclaimer parameter to modules/system/admin.php in a disclaimer action, (4) the disclaimer parameter to modules/mydownloads/admin/index.php in a mydownloadsConfigAdmin action, (5) the disclaimer parameter to modules/newbb_plus/admin/forum_config.php, (6) the disclaimer parameter to modules/mylinks/admin/index.php in a myLinksConfigAdmin action, or (7) the intro parameter to modules/sections/admin/index.php in a secconfig action, which inject PHP sequences into (a) sections/cache/intro.php, (b) mylinks/cache/disclaimer.php, (c) mydownloads/cache/disclaimer.php, (d) newbb_plus/cache/disclaimer.php, (e) system/cache/disclaimer.php, (f) system/cache/footer.php, (g) system/cache/header.php, or (h) system/cache/maintenance.php in modules/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-12-27  
Modified Date
2008-11-15  
Seq
2007-6548  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300382 58543 CVE-2007-6548 3493  View
300383 58543 CVE-2007-6548 4790  View
300384 58543 CVE-2007-6548 http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131  View
300385 58543 CVE-2007-6548 20071225 Multiple vulnerabilities in RUNCMS 1.6 by DSecRG  View
300386 58543 CVE-2007-6548 27019  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57776 JVNDB-2007-006468 RunCMS における任意の PHP コード挿入される脆弱性 RunCMS は、直接静的コードを挿入される、および modules/ 配下の以下のスクリプトに PHP シーケンスを挿入される不備があるため、任意の PHP コード挿入される脆弱性が存在します。 CVE-2007-6548 29903 CVE-2007-6548 58543 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006468.html 2007-12-27 2012-12-20 View