Lucene search

MitreCVE-2007-5574

HistoryOct 18, 2007 - 9:17 p.m.

CVE-2007-5574

2007-10-1821:17:00

CWE-94

mitre

web.nvd.nist.gov

cve

2007

5574

php

remote file inclusion

vulnerability

djpage.php

phpdj 0.5

nvd

security

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.019

Percentile

88.9%

JSON

PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

Affected configurations

Nvd

Node

phpdjphpdjMatch0.5

VendorProductVersionCPE
phpdjphpdj0.5cpe:2.3:a:phpdj:phpdj:0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpdj	phpdj	0.5	cpe:2.3:a:phpdj:phpdj:0.5:::::::*

References

www.securityfocus.com/bid/26112

exchange.xforce.ibmcloud.com/vulnerabilities/37262

www.exploit-db.com/exploits/4543

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.019

Percentile

88.9%

JSON

Related for CVE-2007-5574