Lucene search
HistoryMar 13, 2007 - 1:19 a.m.
CVE-2007-1429
cve
2007
1429
php
remote file inclusion
vulnerabilities
moodle
1.7.1
arbitrary code execution
url
cmd parameter
admin
utfdbmigrate.php
filter.php
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.4%
Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.
Affected configurations
Node
moodlemoodleMatch1.7.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle:moodle | moodle | eq | 1.7.1 |
Related
nvd
nvd
CVE-2007-1429
2007-03-13 01:19:00
cvelist
cvelist
CVE-2007-1429
2007-03-13 01:00:00
nessus
nessus
openSUSE 10 Security Update : moodle (moodle-3959)
2007-10-17 00:00:00
prion
prion
Remote file inclusion
2007-03-13 01:19:00
ubuntucve
ubuntucve
CVE-2007-1429
2007-03-13 00:00:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.4%
Related for CVE-2007-1429