Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2008-7005

EPSS 2.66% · P86
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-7005

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotes_to_edit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
minb 'quote.php'PHP代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
minb(Minb Is Not a Blog)是一个基于PHP的内容管理系统。 Minb Is Not a Blog(minb)0.1.0版本中的include/modules/top/1-random_quote.php中存在代码注入漏洞。允许远程攻击者借助quotes_to_edit参数,执行任意的PHP代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-7005

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-7005

登录查看更多情报信息。

Same Patch Batch · n/a · 2009-08-19 · 21 CVEs total

CVE-2008-7006Phpversion Free PHP VX Guestbook 'admin/backupdb.php'授权问题漏洞
CVE-2008-7015Unreal Engine Failed Memory Allocation 远程拒绝服务漏洞
CVE-2008-7014fhttpd HTTP头 未明漏洞
CVE-2008-7013Baidu Hi IM 数字错误漏洞
CVE-2008-7012Accellion File Transfer Appliance FTA 未明漏洞
CVE-2008-7011Unreal engine 文件下载 拒绝服务攻击漏洞
CVE-2008-7010SkaLinks Exchange Script 'admin/register.php'创建账号访问验证漏洞
CVE-2008-7009Checkpoint ZoneAlarm Internet安全套件multiscan.exe缓冲区溢出漏洞
CVE-2008-7008HyperStop Web Host Directory 认证绕过漏洞
CVE-2008-7007Phpversion Free PHP VX Guestbook认证绕过漏洞
CVE-2009-0682ca internet_security_suite r3 输入验证漏洞
CVE-2008-7004Elog Electronic Logbook 缓冲区溢出漏洞
CVE-2009-2860IBM DB2 安全漏洞
CVE-2009-2859IBM DB2 权限许可和访问控制问题漏洞
CVE-2009-2858IBM DB2 资源管理错误漏洞
CVE-2009-2857Sun Solaris文件系统与虚拟内存子系统交互拒绝服务漏洞
CVE-2009-2740CA HIPS kmxIds.sys驱动拒绝服务漏洞
CVE-2009-2627Acer AcerCtrls.APlunch ActiveX控件不安全方式调用漏洞
CVE-2009-2055Cisco IOS XR软件BGP更新拒绝服务漏洞
CVE-2009-1884Perl 数字错误漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2008-7005

No comments yet


Leave a comment