Lucene search

K
cve[email protected]CVE-2007-1288
HistoryMar 07, 2007 - 12:19 a.m.

CVE-2007-1288

2007-03-0700:19:00
NVD-CWE-Other
web.nvd.nist.gov
22
cve
2007
1288
php
remote file inclusion
webmobo wb news
security vulnerability
nvd

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.033 Low

EPSS

Percentile

91.1%

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config[installdir] parameter to (1) comment.php, (2) themes.php, (3) directory.php, and (4) sendmsg.php in admin/.

CPENameOperatorVersion
webmobo:wbnewswebmobo wbnewsle1.4.1

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.033 Low

EPSS

Percentile

91.1%

Related for CVE-2007-1288