Lucene search

MitreCVE-2007-5053

HistorySep 24, 2007 - 10:17 p.m.

CVE-2007-5053

2007-09-2422:17:00

CWE-94

mitre

web.nvd.nist.gov

cve

2007

5053

izicontents

php

code execution

remote attackers

vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.005

Percentile

76.7%

JSON

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php; or a URL in the language_home parameter to (3) search/search.php, (4) poll/inlinepoll.php, (5) poll/showpoll.php, (6) links/showlinks.php, or (7) links/submit_links.php in modules/; related to missing checks in (a) modules/moduleSec.php and (b) include/includeSec.php for inclusion of certain URLs, as demonstrated by an ftps:// URL.

Affected configurations

Nvd

Node

izicontentsizicontentsRange≤1_rc6

VendorProductVersionCPE
izicontentsizicontents*cpe:2.3:a:izicontents:izicontents:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
izicontents	izicontents	*	cpe:2.3:a:izicontents:izicontents::::::::

References

www.exploit-db.com/exploits/4441

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.005

Percentile

76.7%

JSON

Related for CVE-2007-5053