Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-0098
HistoryJan 05, 2007 - 6:28 p.m.

CVE-2007-0098

2007-01-0518:28:00
[email protected]
web.nvd.nist.gov
3

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.027

Percentile

90.5%

JSON

Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by language.php.

Affected configurations

Nvd
Node
verliadminverliadminRange≤0.3
VendorProductVersionCPE
verliadminverliadmin*cpe:2.3:a:verliadmin:verliadmin:*:*:*:*:*:*:*:*

Related

cvelist 1
prion 1
exploitdb 1
cve 1
securityvulns 1
cvelist
cvelist
CVE-2007-0098
2007-01-05 18:00:00
prion
prion
Directory traversal
2007-01-05 18:28:00
exploitdb
exploitdb
VerliAdmin 0.3 - 'language.php' Local File Inclusion
2007-01-03 00:00:00
cve
cve
CVE-2007-0098
2007-01-05 18:28:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2006-12-20 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.027

Percentile

90.5%

JSON
Related for NVD:CVE-2007-0098
cvelist1prion1exploitdb1cve1securityvulns1