Lucene search

K
cve[email protected]CVE-2007-5294
HistoryOct 09, 2007 - 6:17 p.m.

CVE-2007-5294

2007-10-0918:17:00
CWE-94
web.nvd.nist.gov
20
php
remote file inclusion
vulnerability
idmos 1.0-beta
phoenix
execute arbitrary code
url
site_absolute_path parameter

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.7%

PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to execute arbitrary PHP code via a URL in the site_absolute_path parameter.

CPENameOperatorVersion
idmos:idmosidmoseq1.0-beta

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.7%

Related for CVE-2007-5294