Lucene search

[email protected]CVE-2007-2457

HistoryMay 02, 2007 - 6:19 p.m.

CVE-2007-2457

2007-05-0218:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

php

remote file inclusion

vulnerability

pixaria gallery

arbitrary code execution

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.059 Low

EPSS

Percentile

93.3%

JSON

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.

CPENameOperatorVersion
pixaria:pixaria_gallerypixaria pixaria galleryeq1.2.1
pixaria:pixaria_gallerypixaria pixaria galleryeq1.0.5
pixaria:pixaria_gallerypixaria pixaria galleryeq1.1.1
pixaria:pixaria_gallerypixaria pixaria galleryeq1.4
pixaria:pixaria_gallerypixaria pixaria galleryeq1.1.5
pixaria:pixaria_gallerypixaria pixaria galleryeq1.1.6
pixaria:pixaria_gallerypixaria pixaria galleryeq1.3.3
pixaria:pixaria_gallerypixaria pixaria galleryeq1.2
pixaria:pixaria_gallerypixaria pixaria galleryeq1.0.3
pixaria:pixaria_gallerypixaria pixaria galleryeq1.3

CPE	Name	Operator	Version
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.2.1
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.0.5
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.1.1
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.4
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.1.5
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.1.6
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.3.3
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.2
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.0.3
pixaria:pixaria_gallery	pixaria pixaria gallery	eq	1.3

Rows per page:

1-10 of 211

References

osvdb.org/34976

pixaria.com/index.history.php

secunia.com/advisories/24821

www.pixaria.com/news/article/70/

www.pixaria.com/news/article/71/

www.securityfocus.com/archive/1/465847/100/200/threaded

www.securityfocus.com/bid/23489

www.vupen.com/english/advisories/2007/1390

exchange.xforce.ibmcloud.com/vulnerabilities/33662

www.exploit-db.com/exploits/3733

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.059 Low

EPSS

Percentile

93.3%

JSON

Related for CVE-2007-2457

prion2 cve1