Lucene search

K
cveMitreCVE-2007-1631
HistoryMar 23, 2007 - 9:19 p.m.

CVE-2007-1631

2007-03-2321:19:00
mitre
web.nvd.nist.gov
33
cve-2007-1631
php
remote file inclusion
clbox 1.01
signup.php
security vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.012

Percentile

85.2%

PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use

Affected configurations

Nvd
Node
clboxclboxMatch1.01
VendorProductVersionCPE
clboxclbox1.01cpe:2.3:a:clbox:clbox:1.01:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.012

Percentile

85.2%

Related for CVE-2007-1631