Lucene search

K
cve[email protected]CVE-2007-1525
HistoryMar 20, 2007 - 8:19 p.m.

CVE-2007-1525

2007-03-2020:19:00
web.nvd.nist.gov
41
cve-2007-1525
postpost.php
dayfox blog
dfblog
remote code execution
php
security vulnerability

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.145 Low

EPSS

Percentile

95.8%

Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.

Affected configurations

NVD
Node
dayfox_designsdayfox_blogMatch4

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.145 Low

EPSS

Percentile

95.8%