Lucene search

MitreCVE-2007-4262

HistoryAug 08, 2007 - 11:17 p.m.

CVE-2007-4262

2007-08-0823:17:00

mitre

web.nvd.nist.gov

information security

vulnerability

ezphotosales

file upload

php code

nvd

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/.

Affected configurations

Nvd

Node

ez_photo_salesez_photo_salesRange≤1.9.3

VendorProductVersionCPE
ez_photo_salesez_photo_sales*cpe:2.3:a:ez_photo_sales:ez_photo_sales:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ez_photo_sales	ez_photo_sales	*	cpe:2.3:a:ez_photo_sales:ez_photo_sales::::::::

References

secunia.com/advisories/26341

securityreason.com/securityalert/2985

www.airscanner.com/security/07080601_ezphotosales.htm

www.informit.com/guides/content.asp?g=security&seqNum=267

www.informit.com/guides/content.asp?g=security&seqNum=268

www.securityfocus.com/archive/1/475678/100/0/threaded

www.securityfocus.com/bid/25323

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

7.2

Confidence

High

EPSS

0.005

Percentile

76.8%

JSON

Related for CVE-2007-4262