Lucene search

PRIOn knowledge basePRION:CVE-2007-2457

HistoryMay 02, 2007 - 6:19 p.m.

Remote file inclusion

2007-05-0218:19:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.031 Low

EPSS

Percentile

90.8%

JSON

PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter.

CPENameOperatorVersion
pixaria_galleryeq1.2.1
pixaria_galleryeq1.0.5
pixaria_galleryeq1.1.1
pixaria_galleryeq1.4
pixaria_galleryeq1.1.5
pixaria_galleryeq1.1.6
pixaria_galleryeq1.3.3
pixaria_galleryeq1.2
pixaria_galleryeq1.0.3
pixaria_galleryeq1.3

Name	Operator	Version
pixaria_gallery	eq	1.2.1
pixaria_gallery	eq	1.0.5
pixaria_gallery	eq	1.1.1
pixaria_gallery	eq	1.4
pixaria_gallery	eq	1.1.5
pixaria_gallery	eq	1.1.6
pixaria_gallery	eq	1.3.3
pixaria_gallery	eq	1.2
pixaria_gallery	eq	1.0.3
pixaria_gallery	eq	1.3

Rows per page:

1-10 of 211

References

osvdb.org/34976

pixaria.com/index.history.php

secunia.com/advisories/24821

www.pixaria.com/news/article/70/

www.pixaria.com/news/article/71/

www.securityfocus.com/archive/1/465847/100/200/threaded

www.securityfocus.com/bid/23489

www.vupen.com/english/advisories/2007/1390

exchange.xforce.ibmcloud.com/vulnerabilities/33662

www.exploit-db.com/exploits/3733

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.031 Low

EPSS

Percentile

90.8%

JSON

Related for PRION:CVE-2007-2457