Lucene search
HistoryFeb 16, 2007 - 1:28 a.m.
CVE-2007-0975
cve-2007-0975
apache stats
vulnerability
extract function
_request
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.2%
Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when the extract function is used on the _REQUEST superglobal array.
Affected configurations
Node
apache_statsapache_statsMatch0.0.1_beta
ORapache_statsapache_statsMatch0.0.2_beta
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache_stats:apache_stats | apache stats | eq | 0.0.1_beta |
| apache_stats:apache_stats | apache stats | eq | 0.0.2_beta |
Related
nvd
nvd
CVE-2007-0975
2007-02-16 01:28:00
prion
prion
Design/Logic Flaw
2007-02-16 01:28:00
cvelist
cvelist
CVE-2007-0975
2007-02-16 01:00:00
securityvulns
securityvulns
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.2%
Related for CVE-2007-0975