Lucene search

K
nvd[email protected]NVD:CVE-2007-6174
HistoryNov 30, 2007 - 12:46 a.m.

CVE-2007-6174

2007-11-3000:46:00
CWE-264
web.nvd.nist.gov
2

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

69.1%

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
phpdevshellphpdevshellRange0.6.0
VendorProductVersionCPE
phpdevshellphpdevshell*cpe:2.3:a:phpdevshell:phpdevshell:*:*:*:*:*:*:*:*

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.003

Percentile

69.1%

Related for NVD:CVE-2007-6174