Lucene search
HistoryJun 15, 2007 - 1:30 a.m.
CVE-2007-3236
cve-2007-3236
php
remote file inclusion
vulnerability
horoscope 1.0
xoops
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.666 Medium
EPSS
Percentile
98.0%
PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter.
Affected configurations
Node
xoopshoroscope_moduleMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| xoops:horoscope_module | xoops horoscope module | eq | 1.0 |
Related
nvd
nvd
CVE-2007-3236
2007-06-15 01:30:00
prion
prion
Remote file inclusion
2007-06-15 01:30:00
cvelist
cvelist
CVE-2007-3236
2007-06-15 01:00:00
canvas
canvas
Immunity Canvas: XOOPS_HOROSCOPE
2007-06-15 01:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.666 Medium
EPSS
Percentile
98.0%
Related for CVE-2007-3236