Lucene search

K
cve[email protected]CVE-2007-1167
HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1167

2007-03-0221:18:00
CWE-200
web.nvd.nist.gov
322
cve-2007-1167
remote code execution
dev!l`z clanportal
dzcp
mysql data vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter.

Affected configurations

NVD
Node
dzcpdev\!l\'z_clanportalRange1.4.5

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

Related for CVE-2007-1167