Lucene search

PRIOn knowledge basePRION:CVE-2007-0535

HistoryJan 26, 2007 - 1:28 a.m.

Sql injection

2007-01-2601:28:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

89.8%

JSON

Multiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote attackers to execute arbitrary code via requests to unspecified PHP scripts with the poll_id parameter, which is supplied to eval function calls, a different set of vectors than CVE-2007-0504. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
vote_prole4.0

CPE	Name	Operator	Version
	vote_pro	le	4.0

References

osvdb.org/31606

secunia.com/advisories/23834

www.vupen.com/english/advisories/2007/0300

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

89.8%

JSON

Related for PRION:CVE-2007-0535