Lucene search
HistoryApr 09, 2007 - 8:19 p.m.
CVE-2007-1895
cve-2007-1895
php
remote file inclusion
chat.php
sky gunning myspeach
vulnerability
nvd
7.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.3%
PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a my_ms[root] cookie, a different vector than CVE-2007-0491 and CVE-2006-4630.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sky_gunning:myspeach | sky gunning myspeach | le | 3.0.7 |
Related
prion
prion
Remote file inclusion
2007-04-09 20:19:00
Remote file inclusion
2007-01-25 00:28:00
cve
cve
CVE-2007-0491
2007-01-25 00:28:00
CVE-2006-4630
2006-09-08 20:04:00
securityvulns
securityvulns
7.7 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2007-1895