Lucene search

K
cve[email protected]CVE-2007-5492
HistoryOct 17, 2007 - 7:17 p.m.

CVE-2007-5492

2007-10-1719:17:00
CWE-94
web.nvd.nist.gov
35
cve-2007-5492
static code injection
sitebar
translator.php
nvd
vulnerability
remote code execution

7.1 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.4%

Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter.

CPENameOperatorVersion
sitebar:sitebarsitebareq3.3.8

7.1 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.4%