Lucene search

K
nvd[email protected]NVD:CVE-2007-2430
HistoryMay 02, 2007 - 12:19 a.m.

CVE-2007-2430

2007-05-0200:19:00
web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:C/A:N

6.9 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contents and directory traversal manipulations into a SessionUserLang cookie to public/code/index.php.

Affected configurations

NVD
Node
tecnick.comtcexamRange4.0.011

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:C/A:N

6.9 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.4%

Related for NVD:CVE-2007-2430