Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://osvdb.org/35628 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35624 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35631 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35633 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35629 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35622 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35621 | vdb-entry x_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/466683/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://osvdb.org/35625 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35623 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35632 | vdb-entry x_refsource_OSVDB |
| http://securityreason.com/securityalert/2624 | third-party-advisory x_refsource_SREASON |
| http://osvdb.org/35626 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35630 | vdb-entry x_refsource_OSVDB |
| http://osvdb.org/35627 | vdb-entry x_refsource_OSVDB |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://osvdb.org/35628 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35624 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35631 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35633 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35629 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35622 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35621 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.securityfocus.com/archive/1/466683/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://osvdb.org/35625 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35623 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35632 | vdb-entry x_refsource_OSVDB x_transferred |
| http://securityreason.com/securityalert/2624 | third-party-advisory x_refsource_SREASON x_transferred |
| http://osvdb.org/35626 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35630 | vdb-entry x_refsource_OSVDB x_transferred |
| http://osvdb.org/35627 | vdb-entry x_refsource_OSVDB x_transferred |