Lucene search
HistoryApr 10, 2007 - 11:19 p.m.
CVE-2007-1908
php
file inclusion
vulnerability
php121 instant messenger
execute arbitrary code
remote attackers
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.09 Low
EPSS
Percentile
94.7%
PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the file_exists function.
Affected configurations
Node
php121php121_instant_messengerMatch2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| php121:php121_instant_messenger | php121 php121 instant messenger | eq | 2.2 |
Related
nvd
nvd
CVE-2007-1908
2007-04-10 23:19:00
cvelist
cvelist
CVE-2007-1908
2007-04-10 23:00:00
prion
prion
Arbitrary file deletion
2007-04-10 23:19:00
securityvulns
securityvulns
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.09 Low
EPSS
Percentile
94.7%
Related for CVE-2007-1908