Lucene search
HistoryOct 09, 2007 - 9:17 p.m.
CVE-2007-5314
php
remote file inclusion
xkiosk web 3.0.1i
vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.056 Low
EPSS
Percentile
93.3%
PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PEARPATH parameter.
Affected configurations
Node
xkioskxkiosk_webMatch3.0.1i
| CPE | Name | Operator | Version |
|---|---|---|---|
| xkiosk:xkiosk_web | xkiosk xkiosk web | eq | 3.0.1i |
Related
prion
prion
Remote file inclusion
2007-10-09 21:17:00
cvelist
cvelist
CVE-2007-5314
2007-10-09 21:00:00
nvd
nvd
CVE-2007-5314
2007-10-09 21:17:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.056 Low
EPSS
Percentile
93.3%
Related for CVE-2007-5314