Lucene search

K
cve[email protected]CVE-2007-0930
HistoryFeb 14, 2007 - 11:28 a.m.

CVE-2007-0930

2007-02-1411:28:00
web.nvd.nist.gov
30
cve-2007-0930
apache stats
extract vulnerability
php
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.9%

Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP’s extract function.

Affected configurations

NVD
Node
apache_statsapache_statsMatch0.0.1_beta
OR
apache_statsapache_statsMatch0.0.2_beta

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.9%

Related for CVE-2007-0930