Lucene search
HistoryMay 17, 2007 - 7:30 p.m.
CVE-2007-2736
cve-2007-2736
php
remote file inclusion
achievo
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.
Affected configurations
Node
applea_ux
ORapplemac_os_x
ORhphp-ux
ORhptru64
ORibmos2
ORlinuxlinux_kernel
ORmicrosoftwindows_2000
ORmicrosoftwindows_2003_server
ORmicrosoftwindows_95
ORmicrosoftwindows_98gold
ORmicrosoftwindows_98se
ORmicrosoftwindows_me
ORmicrosoftwindows_ntMatch4.0
ORmicrosoftwindows_xp
ORsanta_cruz_operationsco_unix
ORsunsolaris
ORwindriverbsdos
achievoachievoMatch1.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| achievo:achievo | achievo | eq | 1.1.0 |
Related
prion
prion
Remote file inclusion
2007-05-17 19:30:00
cvelist
cvelist
CVE-2007-2736
2007-05-17 19:00:00
nvd
nvd
CVE-2007-2736
2007-05-17 19:30:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2007-2736