CVE-2007-5927

2022-10-0316:14:31

mitre

www.cve.org

openbase

directory traversal

remote authenticated users

globallog stored procedure

arbitrary code execution

cve-2007-5926

6.9 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.8%

JSON

Directory traversal vulnerability in OpenBase 10.0.5 and earlier allows remote authenticated users to create files with arbitrary contents via a … (dot dot) in the first argument to the GlobalLog stored procedure. NOTE: this can be leveraged to execute arbitrary code using CVE-2007-5926.