Lucene search
HistoryJun 14, 2007 - 11:30 p.m.
CVE-2007-3222
cve-2007-3222
php
remote file inclusion
modify.php
xfsection 1.07
xoops
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.102 Low
EPSS
Percentile
95.0%
PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the dir_module parameter.
Affected configurations
Node
xoopsxfsection_moduleMatch1.07
| CPE | Name | Operator | Version |
|---|---|---|---|
| xoops:xfsection_module | xoops xfsection module | eq | 1.07 |
Related
nessus
nessus
XOOPS XFSection Module modify.php dir_module Parameter Remote File Inclusion
2007-06-14 00:00:00
prion
prion
Remote file inclusion
2007-06-14 23:30:00
cvelist
cvelist
CVE-2007-3222
2007-06-14 23:00:00
nvd
nvd
CVE-2007-3222
2007-06-14 23:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.102 Low
EPSS
Percentile
95.0%
Related for CVE-2007-3222