Lucene search
HistoryMar 30, 2007 - 1:19 a.m.
CVE-2007-1771
security
vulnerability
php
remote code execution
ay system solutions
web content system
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.09 Low
EPSS
Percentile
94.6%
PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System (WCS) 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the path[JavascriptEdit] parameter.
Affected configurations
Node
ay_system_solutionsweb_content_systemMatch2.7.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ay_system_solutions:web_content_system | ay system solutions web content system | eq | 2.7.1 |
Related
nvd
nvd
CVE-2007-1771
2007-03-30 01:19:00
cvelist
cvelist
CVE-2007-1771
2007-03-30 01:00:00
prion
prion
Remote file inclusion
2007-03-30 01:19:00
securityvulns
securityvulns
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.09 Low
EPSS
Percentile
94.6%
Related for CVE-2007-1771