Lucene search

K
cve[email protected]CVE-2007-2076
HistoryApr 18, 2007 - 3:19 a.m.

CVE-2007-2076

2007-04-1803:19:00
NVD-CWE-Other
web.nvd.nist.gov
20
cve-2007-2076
php
remote file inclusion
maian gallery 1.0
security vulnerability

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating “this problem existed only briefly in v1.0.”

CPENameOperatorVersion
maian:gallerymaian galleryeq1.0

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.7%

Related for CVE-2007-2076