Search...

ELSEIF CMS contenus.php contenus Variable Remote File Inclusion

2007-10-06T00:00:00

ID OSVDB:38649
Type osvdb
Reporter OSVDB
Modified 2007-10-06T00:00:00

Description

Manual Testing Notes

http://[target]/elseif/contenus.php?contenus=[Shell]

References:

JSON Vulners Source

Initial Source

{"bulletinFamily": "software", "viewCount": 0, "reporter": "OSVDB", "references": [], "description": "## Manual Testing Notes\nhttp://[target]/elseif/contenus.php?contenus=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "affectedSoftware": [], "hashmap": [{"key": "affectedSoftware", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "8758ed0d535d303ce1894d00c6fb52f7"}, {"key": "cvss", "hash": "e5d275b3ebd62646b78320753699e02e"}, {"key": "description", "hash": "11c39e165bd30fe8ff3d5e1b1862a6f7"}, {"key": "href", "hash": "8d3325e072a2691f6e6737941b544e1c"}, {"key": "modified", "hash": "3b884d1d7a6da05462d1e9f26b81baef"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "3b884d1d7a6da05462d1e9f26b81baef"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "955b328dc7cd615c13af5464c9183464"}, {"key": "title", "hash": "babc5eb96198807dd6b9b9ad6f6a4619"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "href": "https://vulners.com/osvdb/OSVDB:38649", "modified": "2007-10-06T00:00:00", "objectVersion": "1.2", "enchantments": {"vulnersScore": 7.5}, "id": "OSVDB:38649", "title": "ELSEIF CMS contenus.php contenus Variable Remote File Inclusion", "hash": "d95718e567dae0894f1bc47fd62a13f5af8a4ff3e7681bf350467d9c40ef2636", "edition": 1, "published": "2007-10-06T00:00:00", "type": "osvdb", "history": [], "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}

{"result": {"cve": [{"id": "CVE-2007-5305", "type": "cve", "title": "CVE-2007-5305", "description": "Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) contenus parameter to (a) contenus.php; the (2) tpelseifportalrepertoire parameter to (b) votes.php, (c) espaceperso.php, (d) enregistrement.php, (e) commentaire.php, and (f) coeurusr.php in utilisateurs/, and (g) articles/fonctions.php and (h) depot/fonctions.php in moduleajouter/; the (3) corpsdesign parameter to (i) articles/usrarticles.php and (j) depot/usrdepot.php in moduleajouter/; and possibly other files.", "published": "2007-10-09T14:17:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-5305", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-07-29T11:22:17"}], "osvdb": [{"id": "OSVDB:38650", "type": "osvdb", "title": "ELSEIF CMS votes.php tpelseifportalrepertoire Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/votes.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38650", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38651", "type": "osvdb", "title": "ELSEIF CMS espaceperso.php tpelseifportalrepertoire Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/espaceperso.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38651", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38652", "type": "osvdb", "title": "ELSEIF CMS enregistrement.php tpelseifportalrepertoire Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/enregistrement.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38652", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38657", "type": "osvdb", "title": "ELSEIF CMS articles/usrarticles.php corpsdesign Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/articles/usrarticles.php?corpsdesign=[Sh3ll]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38657", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38658", "type": "osvdb", "title": "ELSEIF CMS depot/usrdepot.php corpsdesign Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/depot/usrdepot.php?corpsdesign[Sh3ll]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38658", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38653", "type": "osvdb", "title": "ELSEIF CMS commentaire.php tpelseifportalrepertoire Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/commentaire.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38653", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38656", "type": "osvdb", "title": "ELSEIF CMS depot/fonctions.php tpelseifportalrepertoire Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/depot/fonctions.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38656", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38654", "type": "osvdb", "title": "ELSEIF CMS coeurusr.php tpelseifportalrepertoire Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/coeurusr.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38654", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}, {"id": "OSVDB:38655", "type": "osvdb", "title": "ELSEIF CMS articles/fonctions.php tpelseifportalrepertoire Variable Remote File Inclusion", "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/articles/fonctions.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "published": "2007-10-06T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://vulners.com/osvdb/OSVDB:38655", "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}]}}