Lucene search
MitreCVE-2007-2628HistoryMay 11, 2007 - 5:19 p.m.
CVE-2007-2628
2007-05-1117:19:00
mitre
web.nvd.nist.gov
39
cve-2007-2628
php
remote file inclusion
securityadmin
phpsecurityadmin
psa
arbitrary php code
url parameter
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.066
Percentile
93.8%
PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityAdmin, PSA) 4.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the PSA_PATH parameter.
Affected configurations
Node
justin_koivistophpsecurityadminMatch4.0.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| justin_koivisto | phpsecurityadmin | 4.0.2 | cpe:2.3:a:justin_koivisto:phpsecurityadmin:4.0.2:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
PHPSecurityAdmin 4.0.2 - 'Logout.php' Remote File Inclusion
2007-05-03 00:00:00
cvelist
cvelist
CVE-2007-2628
2007-05-11 17:00:00
prion
prion
Remote file inclusion
2007-05-11 17:19:00
nvd
nvd
CVE-2007-2628
2007-05-11 17:19:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.066
Percentile
93.8%
Related for CVE-2007-2628