Lucene search

K
cve[email protected]CVE-2007-1967
HistoryApr 11, 2007 - 10:19 a.m.

CVE-2007-1967

2007-04-1110:19:00
web.nvd.nist.gov
24
cve
2007
1967
php
remote file inclusion
vulnerability
stat12
index.php
arbitrary code
url
langpath parameter
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

PHP remote file inclusion vulnerability in index.php in stat12 allows remote attackers to execute arbitrary PHP code via a URL in the langpath parameter. NOTE: this issue was published by an unreliable researcher, and there is little information to determine which product is actually affected. This is probably an invalid report based on analysis by CVE and a third party

Affected configurations

NVD
Node
stat12stat12
CPENameOperatorVersion
stat12:stat12stat12eq*

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.5%

Related for CVE-2007-1967