Lucene search

K
cve[email protected]CVE-2007-4818
HistorySep 11, 2007 - 7:17 p.m.

CVE-2007-4818

2007-09-1119:17:00
CWE-94
web.nvd.nist.gov
18
12
cve-2007-4818
php
remote file inclusion
txx cms
vulnerability
execution
arbitrary code
url
doc_root parameter
addons
plugin
sidebar
mail
mailbox
modules

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.2%

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, or (4) mail/mailbox.php in modules/.

CPENameOperatorVersion
txx_cms:txx_cmstxx cmseq0.2

Social References

More

7.8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.2%

Related for CVE-2007-4818