Lucene search

MitreCVE-2007-5592

HistoryOct 19, 2007 - 11:17 p.m.

CVE-2007-5592

2007-10-1923:17:00

CWE-94

mitre

web.nvd.nist.gov

cve-2007-5592

php

remote file inclusion

awzmb

nvd

security

vulnerability

execute arbitrary code

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.02

Percentile

89.0%

JSON

Multiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Setting[OPT_includepath] parameter to (1) adminhelp.php; and (2) admin.incl.php, (3) reg.incl.php, (4) help.incl.php, (5) gbook.incl.php, and (6) core/core.incl.php in modules/.

Affected configurations

Nvd

Node

awzmbawzmbMatch4.2_beta1

VendorProductVersionCPE
awzmbawzmb4.2_beta1cpe:2.3:a:awzmb:awzmb:4.2_beta1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
awzmb	awzmb	4.2_beta1	cpe:2.3:a:awzmb:awzmb:4.2_beta1:::::::*

References

www.securityfocus.com/bid/26116

www.vupen.com/english/advisories/2007/3569

exchange.xforce.ibmcloud.com/vulnerabilities/37272

www.exploit-db.com/exploits/4545

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.02

Percentile

89.0%

JSON

Related for CVE-2007-5592