Lucene search

K
cve[email protected]CVE-2015-7381
HistorySep 28, 2015 - 2:59 a.m.

CVE-2015-7381

2015-09-2802:59:14
CWE-94
web.nvd.nist.gov
25
cve-2015-7381
php
remote file inclusion
refbase
web reference database
vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%

Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary PHP code via the (1) pathToMYSQL or (2) databaseStructureFile parameter, a different issue than CVE-2015-6008.

Affected configurations

NVD
Node
refbaserefbaseRange0.9.6
CPENameOperatorVersion
refbase:refbaserefbasele0.9.6

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%