Lucene search

K
cve[email protected]CVE-2007-2624
HistoryMay 11, 2007 - 5:19 p.m.

CVE-2007-2624

2007-05-1117:19:00
NVD-CWE-Other
web.nvd.nist.gov
17
cve-2007-2624
dynamic variable evaluation
vulnerability
aiocp
cross-site scripting
xss
superglobal array
information security

6.5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.6%

Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks via the SERVER superglobal array. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
aiocp:aiocpaiocple1.3.015

6.5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.6%

Related for CVE-2007-2624