Lucene search

K
cveMitreCVE-2007-3773
HistoryJul 15, 2007 - 10:30 p.m.

CVE-2007-3773

2007-07-1522:30:00
CWE-94
mitre
web.nvd.nist.gov
27
cve-2007-3773
cross-site request forgery
csrf
email-template
generic youtube clone script
remote attackers

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

81.7%

Cross-site request forgery (CSRF) vulnerability in the Email-Template module in Generic YouTube Clone Script allows remote attackers to upload files with arbitrary file types to templates/emails/ as administrators.

Affected configurations

Nvd
Node
generic_youtube_clone_scriptgeneric_youtube_clone_script
VendorProductVersionCPE
generic_youtube_clone_scriptgeneric_youtube_clone_script*cpe:2.3:a:generic_youtube_clone_script:generic_youtube_clone_script:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

81.7%

Related for CVE-2007-3773