Lucene search
HistoryApr 18, 2007 - 3:19 a.m.
CVE-2007-2070
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.113 Low
EPSS
Percentile
95.2%
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php or (2) checkout.php.
Affected configurations
Node
turnkey_web_toolssunshop_shopping_cartRange≤4.0
ORturnkey_web_toolssunshop_shopping_cartMatch3.5
Related
cve
cve
CVE-2007-2070
2007-04-18 03:19:00
CVE-2007-2474
2007-05-02 23:19:00
prion
prion
Remote file inclusion
2007-04-18 03:19:00
Remote file inclusion
2007-05-02 23:19:00
cvelist
cvelist
CVE-2007-2070
2007-04-18 02:20:00
CVE-2007-2474
2007-05-02 23:00:00
nvd
nvd
CVE-2007-2474
2007-05-02 23:19:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.113 Low
EPSS
Percentile
95.2%
Related for NVD:CVE-2007-2070