Lucene search
HistoryApr 22, 2007 - 7:19 p.m.
CVE-2007-2167
cve
2007
2167
static code injection
process.php
aimstats 3.2
remote attackers
php code
config.php
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.
Affected configurations
Node
aimstatsaimstatsMatch3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| aimstats:aimstats | aimstats | eq | 3.2 |
Related
prion
prion
Code injection
2007-04-22 19:19:00
nvd
nvd
CVE-2007-2167
2007-04-22 19:19:00
cvelist
cvelist
CVE-2007-2167
2007-04-22 19:00:00
canvas
canvas
Immunity Canvas: AIMSTATS_EXEC
2007-04-22 19:19:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.023 Low
EPSS
Percentile
89.7%
Related for CVE-2007-2167