Lucene search
MitreCVE-2007-2424HistoryMay 02, 2007 - 12:19 a.m.
CVE-2007-2424
2007-05-0200:19:00
mitre
web.nvd.nist.gov
23
security
php
vulnerability
remote code execution
the merchant
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.1
Percentile
94.9%
PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter.
Affected configurations
Node
the_merchant_projectthe_merchantMatch2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| the_merchant_project | the_merchant | 2.2 | cpe:2.3:a:the_merchant_project:the_merchant:2.2:*:*:*:*:*:*:* |
Related
prion
prion
Remote file inclusion
2007-05-02 00:19:00
exploitdb
exploitdb
The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion
2007-04-29 00:00:00
nvd
nvd
CVE-2007-2424
2007-05-02 00:19:00
cvelist
cvelist
CVE-2007-2424
2007-05-02 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.1
Percentile
94.9%
Related for CVE-2007-2424