Lucene search
HistoryJun 01, 2007 - 1:30 a.m.
CVE-2007-2969
cve-2007-2969
php
remote file inclusion
vulnerability
wanewsletter
url
code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.048 Low
EPSS
Percentile
92.7%
PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the waroot parameter.
Affected configurations
Node
wanewsletterwanewsletterRange≤2.1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| wanewsletter:wanewsletter | wanewsletter | le | 2.1.3 |
Related
cvelist
cvelist
CVE-2007-2969
2007-06-01 01:00:00
nvd
nvd
CVE-2007-2969
2007-06-01 01:30:00
checkpoint_advisories
checkpoint_advisories
Web Servers WAnewsletter Remote File Inclusion (CVE-2007-2969)
2014-07-13 00:00:00
prion
prion
Remote file inclusion
2007-06-01 01:30:00
canvas
canvas
Immunity Canvas: WANEWSLETTER_REMOTE
2007-06-01 01:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.048 Low
EPSS
Percentile
92.7%
Related for CVE-2007-2969