Lucene search
HistoryJan 25, 2007 - 12:28 a.m.
CVE-2007-0487
cve-2007-0487
php remote file inclusion
freeforum 0.9.0
nvd
fpath parameter
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
84.9%
PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before being used
Affected configurations
Node
zoneo-softfreeforumMatch0.9.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| zoneo-soft:freeforum | zoneo-soft freeforum | eq | 0.9.0 |
Related
prion
prion
Remote file inclusion
2007-01-25 00:28:00
cvelist
cvelist
CVE-2007-0487
2007-01-25 00:00:00
nvd
nvd
CVE-2007-0487
2007-01-25 00:28:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.012 Low
EPSS
Percentile
84.9%
Related for CVE-2007-0487