Lucene search
MitreCVE-2007-2709HistoryMay 16, 2007 - 10:19 a.m.
CVE-2007-2709
2007-05-1610:19:00
mitre
web.nvd.nist.gov
34
cve-2007-2709
php
remote file inclusion
nagiosql
vulnerability
url parameter
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.024
Percentile
89.9%
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2005 2.00 allows remote attackers to execute arbitrary PHP code via a URL in the SETS[path][physical] parameter.
Affected configurations
Node
nagiosqlnagiosql_2005Match2.00
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nagiosql | nagiosql_2005 | 2.00 | cpe:2.3:a:nagiosql:nagiosql_2005:2.00:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2007-2709
2007-05-16 10:00:00
nvd
nvd
CVE-2007-2709
2007-05-16 10:19:00
prion
prion
Remote file inclusion
2007-05-16 10:19:00
exploitdb
exploitdb
NagiosQL 2005 2.00 - 'prepend_adm.php' Remote File Inclusion
2007-05-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
High
EPSS
0.024
Percentile
89.9%
Related for CVE-2007-2709