Lucene search

K
cve[email protected]CVE-2007-2076
HistoryApr 18, 2007 - 3:19 a.m.

CVE-2007-2076

2007-04-1803:19:00
web.nvd.nist.gov
23
cve-2007-2076
php
remote file inclusion
maian gallery 1.0
security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.9%

PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating “this problem existed only briefly in v1.0.”

Affected configurations

NVD
Node
maiangalleryMatch1.0
CPENameOperatorVersion
maian:gallerymaian galleryeq1.0

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.9%

Related for CVE-2007-2076