Lucene search
HistoryJun 14, 2007 - 11:30 p.m.
CVE-2007-3221
cve-2007-3221
php
remote file inclusion
xt-conteudo
xoops
nvd
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.433 Medium
EPSS
Percentile
97.3%
PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xoops:xt-conteudo_module | xoops xt-conteudo module | eq | * |
Related
prion
prion
Remote file inclusion
2007-06-14 23:30:00
Remote file inclusion
2007-06-06 01:30:00
Remote file inclusion
2007-06-20 21:30:00
canvas
canvas
Immunity Canvas: XOOPS_XTCONTEUDO
2007-06-14 23:30:00
nessus
nessus
cve
cve
7.3 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.433 Medium
EPSS
Percentile
97.3%
Related for CVE-2007-3221