Lucene search

K
cve[email protected]CVE-2007-4636
HistoryAug 31, 2007 - 11:17 p.m.

CVE-2007-4636

2007-08-3123:17:00
CWE-20
web.nvd.nist.gov
34
cve-2007-4636
php
remote file inclusion
phpbg 0.9.1
vulnerability
nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.222 Low

EPSS

Percentile

96.4%

Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to (1) intern/admin/other/backup.php, (2) intern/admin/, (3) intern/clan/member_add.php, (4) intern/config/key_2.php, or (5) intern/config/forum.php.

CPENameOperatorVersion
phpbg:phpbgphpbgeq0.9.1

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.222 Low

EPSS

Percentile

96.4%

Related for CVE-2007-4636