Lucene search

K
prionPRIOn knowledge basePRION:CVE-2007-5898
HistoryNov 20, 2007 - 6:46 p.m.

Code injection

2007-11-2018:46:00
PRIOn knowledge base
www.prio-n.com
1

6.2 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.01 Low

EPSS

Percentile

82.8%

The (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial multibyte sequences, which has unknown impact and attack vectors, a different issue than CVE-2006-5465.

CPENameOperatorVersion
phple5.2.4

References

6.2 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.01 Low

EPSS

Percentile

82.8%