Lucene search
HistoryOct 09, 2007 - 6:17 p.m.
CVE-2007-5298
cve-2007-5298
php
remote file inclusion
cms creamotion
security vulnerability
nvd
8.4 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.082 Low
EPSS
Percentile
94.3%
Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP code via a URL in the cfg[document_uri] parameter to (1) _administration/securite.php and (2) _administration/gestion_configurations/save_config.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| creamotion:creamotion | creamotion | eq | . |
References
Social References
More
8.4 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.082 Low
EPSS
Percentile
94.3%
Related for CVE-2007-5298