Lucene search

PRIOn knowledge basePRION:CVE-2007-1986

HistoryApr 12, 2007 - 1:19 a.m.

Remote file inclusion

2007-04-1201:19:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.139 Low

EPSS

Percentile

95.5%

JSON

Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to template/barnraiser_01/maint_contact_view.tpl.php, and the (3) template_path parameter to template/barnraiser_01/default.tpl.php. NOTE: this issue might overlap CVE-2006-5533.

CPENameOperatorVersion
aroundmeeq0.7.7

CPE	Name	Operator	Version
	aroundme	eq	0.7.7

References

osvdb.org/34623

osvdb.org/34624

osvdb.org/34625

secunia.com/advisories/24773

www.securityfocus.com/bid/23303

www.vupen.com/english/advisories/2007/1262

exchange.xforce.ibmcloud.com/vulnerabilities/33427

www.exploit-db.com/exploits/3659

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.139 Low

EPSS

Percentile

95.5%

JSON

Related for PRION:CVE-2007-1986