Lucene search
HistoryNov 05, 2007 - 7:46 p.m.
CVE-2007-5822
cve
2007
5822
code injection
vulnerability
forum.php
ben ng scribe
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.024 Low
EPSS
Percentile
90.0%
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.
Affected configurations
Node
scribescribeMatch0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| scribe:scribe | scribe | eq | 0.2 |
References
Related
prion
prion
Code injection
2007-11-05 19:46:00
nvd
nvd
CVE-2007-5822
2007-11-05 19:46:00
cvelist
cvelist
CVE-2007-5822
2007-11-05 19:00:00
7.4 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.024 Low
EPSS
Percentile
90.0%
Related for CVE-2007-5822