Lucene search

[email protected]CVE-2007-1990

HistoryApr 12, 2007 - 10:19 a.m.

CVE-2007-1990

2007-04-1210:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-1990

php

remote file inclusion

vulnerability

sam crew myblog

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.4%

JSON

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
sam_crew:myblogsam crew myblogeq1.6
sam_crew:myblogsam crew myblogeq1.5
sam_crew:myblogsam crew myblogeq1.3
sam_crew:myblogsam crew myblogeq1.0
sam_crew:myblogsam crew myblogeq1.1
sam_crew:myblogsam crew myblogeq1.4
sam_crew:myblogsam crew myblogeq1.2

CPE	Name	Operator	Version
sam_crew:myblog	sam crew myblog	eq	1.6
sam_crew:myblog	sam crew myblog	eq	1.5
sam_crew:myblog	sam crew myblog	eq	1.3
sam_crew:myblog	sam crew myblog	eq	1.0
sam_crew:myblog	sam crew myblog	eq	1.1
sam_crew:myblog	sam crew myblog	eq	1.4
sam_crew:myblog	sam crew myblog	eq	1.2

References

osvdb.org/37432

www.vupen.com/english/advisories/2007/1302

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.4%

JSON

Related for CVE-2007-1990

prion2 cve1 securityvulns2