Lucene search

K
cve[email protected]CVE-2007-1697
HistoryMar 27, 2007 - 1:19 a.m.

CVE-2007-1697

2007-03-2701:19:00
web.nvd.nist.gov
25
cve
php
remote file inclusion
philex
vulnerability
security
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.2%

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter.

Affected configurations

NVD
Node
philexphilexRange0.2.3
CPENameOperatorVersion
philex:philexphilexle0.2.3

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.2%