NVD

Id
58647  
Name
CVE-2007-6652  
Description
cpie.php in XCMS 1.83 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct direct static code injection attacks and execute arbitrary code via the testo_0 parameter in a cpie admin action to index.php, which writes to dati/generali/footer.dtb (aka the XCMS footer).  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2008-01-04  
Modified Date
2008-11-15  
Seq
2007-6652  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300891 58647 CVE-2007-6652 4813  View
300892 58647 CVE-2007-6652 xcms-cpie-code-execution(39346)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49977 JVNDB-2008-005287 XCMS の cpie.php における静的コードを直接挿入する攻撃を実行される脆弱性 XCMS の cpie.php は、Web ブラウザへリダイレクトを送信するが停止しないため、静的コードを直接挿入する攻撃を実行される、および任意のコードを実行される脆弱性が存在します。 CVE-2007-6652 30007 CVE-2007-6652 58647 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005287.html 2008-01-04 2012-12-20 View