NVD

Id
6786  
Name
CVE-2008-7055  
Description
module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-08-24  
Modified Date
2009-08-27  
Seq
2008-7055  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38717 6786 CVE-2008-7055 6301  View
38718 6786 CVE-2008-7055 20080825 [DSECRG-08-038] Multiple Local File Include Vulnerabilities in ezContents CMS 2.0.3  View
38719 6786 CVE-2008-7055 30821  View
38720 6786 CVE-2008-7055 ezcontents-link-file-include(44663)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44665 JVNDB-2009-005672 ezContents の module.php におけるディレクトリトラバーサル保護メカニズムを回避される脆弱性 ezContents の module.php には、ディレクトリトラバーサル保護メカニズムを回避され、任意のファイルをインクルードおよび実行される脆弱性が存在します。 CVE-2008-7055 37168 CVE-2008-7055 6786 5.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005672.html 2009-08-24 2012-12-20 View