Lucene search

[email protected]CVE-2007-2521

HistoryMay 08, 2007 - 6:19 p.m.

CVE-2007-2521

2007-05-0818:19:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2007-2521

php

remote file inclusion

e-gads!

security vulnerability

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.8%

JSON

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter.

Affected configurations

NVD

Node

e-gadse-gadsRange≤2.2.6

e-gadse-gadsMatch2.2.1

e-gadse-gadsMatch2.2.2

e-gadse-gadsMatch2.2.3

e-gadse-gadsMatch2.2.4

e-gadse-gadsMatch2.2.5

CPENameOperatorVersion
e-gads:e-gadse-gadsle2.2.6
e-gads:e-gadse-gadseq2.2.1
e-gads:e-gadse-gadseq2.2.2
e-gads:e-gadse-gadseq2.2.3
e-gads:e-gadse-gadseq2.2.4
e-gads:e-gadse-gadseq2.2.5

CPE	Name	Operator	Version
e-gads:e-gads	e-gads	le	2.2.6
e-gads:e-gads	e-gads	eq	2.2.1
e-gads:e-gads	e-gads	eq	2.2.2
e-gads:e-gads	e-gads	eq	2.2.3
e-gads:e-gads	e-gads	eq	2.2.4
e-gads:e-gads	e-gads	eq	2.2.5

References

osvdb.org/35773

secunia.com/advisories/25104

www.securityfocus.com/bid/23817

www.vupen.com/english/advisories/2007/1665

exchange.xforce.ibmcloud.com/vulnerabilities/34073

sourceforge.net/project/shownotes.php?group_id=88942&release_id=533122

www.exploit-db.com/exploits/3846

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.067 Low

EPSS

Percentile

93.8%

JSON

Related for CVE-2007-2521

cvelist1 prion1 nvd1