Lucene search
HistoryMay 08, 2007 - 11:19 p.m.
CVE-2007-2527
cve
2007
2527
php
remote file inclusion
dynamicpad
vulnerability
dp_logs.php
index.php
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.131 Low
EPSS
Percentile
95.6%
Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a URL in the HomeDir parameter to (1) dp_logs.php or (2) index.php.
Affected configurations
Node
dynamicpaddynamicpadMatch1.02
| CPE | Name | Operator | Version |
|---|---|---|---|
| dynamicpad:dynamicpad | dynamicpad | eq | 1.02 |
References
Related
cvelist
cvelist
CVE-2007-2527
2007-05-08 23:00:00
prion
prion
Remote file inclusion
2007-05-08 23:19:00
nvd
nvd
CVE-2007-2527
2007-05-08 23:19:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.131 Low
EPSS
Percentile
95.6%
Related for CVE-2007-2527