Lucene search

K
cve[email protected]CVE-2007-4610
HistoryAug 31, 2007 - 12:17 a.m.

CVE-2007-4610

2007-08-3100:17:00
CWE-264
web.nvd.nist.gov
21
unrestricted file upload
file upload vulnerability
moonware
dale mooney gallery
remote attackers
php files
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%

Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and execute arbitrary PHP files in images/, possibly related to config/admin.php.

Affected configurations

NVD
Node
dale_mooneymoon_gallery

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%

Related for CVE-2007-4610