Lucene search

K
cve[email protected]CVE-2007-6325
HistoryDec 13, 2007 - 7:46 p.m.

CVE-2007-6325

2007-12-1319:46:00
CWE-20
CWE-94
web.nvd.nist.gov
19
cve-2007-6325
php
remote file inclusion
fastpublish cms
adminbereich
designconfig.php
security vulnerability
nvd

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.215 Low

EPSS

Percentile

96.4%

PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attackers to execute arbitrary PHP code via a URL in the config[fsBase] parameter, a different vector than CVE-2006-2726.

7.7 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.215 Low

EPSS

Percentile

96.4%

Related for CVE-2007-6325