Lucene search

K
cveMitreCVE-2007-2708
HistoryMay 16, 2007 - 10:19 a.m.

CVE-2007-2708

2007-05-1610:19:00
mitre
web.nvd.nist.gov
30
php
remote file inclusion
vulnerability
feindt computerservice news
news-script 2.0
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.053

Percentile

93.1%

PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter.

Affected configurations

Nvd
Node
feindt_computerservicenews-scriptMatch2.0
VendorProductVersionCPE
feindt_computerservicenews-script2.0cpe:2.3:a:feindt_computerservice:news-script:2.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.053

Percentile

93.1%

Related for CVE-2007-2708