Lucene search
MitreCVE-2007-1477HistoryMar 16, 2007 - 9:19 p.m.
CVE-2007-1477
2007-03-1621:19:00
mitre
web.nvd.nist.gov
28
cve
2007
1477
directory traversal
php point of sale
oscommerce 1.1
remote attackers
arbitrary local files
cve dispute
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.007
Percentile
80.4%
Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the cfg_language parameter. NOTE: this issue has been disputed by CVE, since the cfg_language variable is configured upon proper product installation
Affected configurations
Node
oscommercephp_point_of_saleMatch1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| oscommerce | php_point_of_sale | 1.1 | cpe:2.3:a:oscommerce:php_point_of_sale:1.1:*:*:*:*:*:*:* |
Related
prion
prion
Directory traversal
2007-03-16 21:19:00
cvelist
cvelist
CVE-2007-1477
2007-03-16 21:00:00
nvd
nvd
CVE-2007-1477
2007-03-16 21:19:00
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
High
EPSS
0.007
Percentile
80.4%
Related for CVE-2007-1477