Lucene search

K
cve[email protected]CVE-2007-6139
HistoryNov 27, 2007 - 7:46 p.m.

CVE-2007-6139

2007-11-2719:46:00
CWE-94
web.nvd.nist.gov
18
php
remote file inclusion
vulnerability
mp3 toolbox
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.6%

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skin_file parameter.

Affected configurations

NVD
Node
mp3toolboxMatch1.0_beta_5
CPENameOperatorVersion
mp3:toolboxmp3 toolboxeq1.0_beta_5

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.6%

Related for CVE-2007-6139