Lucene search
HistoryJan 09, 2007 - 11:28 a.m.
CVE-2007-0135
cve
2007
0135
php
remote file inclusion
vulnerability
aratix
security
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.095 Low
EPSS
Percentile
94.8%
PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the current_path parameter.
Affected configurations
Node
aratixaratixRange≤0.2.2_beta_11
| CPE | Name | Operator | Version |
|---|---|---|---|
| aratix:aratix | aratix | le | 0.2.2_beta_11 |
Related
prion
prion
Remote file inclusion
2007-01-09 11:28:00
cvelist
cvelist
CVE-2007-0135
2007-01-09 11:00:00
nvd
nvd
CVE-2007-0135
2007-01-09 11:28:00
securityvulns
securityvulns
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.095 Low
EPSS
Percentile
94.8%
Related for CVE-2007-0135