Lucene search

K
cve[email protected]CVE-2007-1539
HistoryMar 20, 2007 - 10:19 p.m.

CVE-2007-1539

2007-03-2022:19:00
web.nvd.nist.gov
19
cve
2007
1539
directory traversal
pragmamx landkarten 2.1 module
php code injection
apache log file

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a … (dot dot) sequence in the module_name parameter, as demonstrated via a static PHP code injection attack in an Apache log file.

Affected configurations

NVD
Node
pragmamxlandkartenMatch2.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.7%

Related for CVE-2007-1539