Lucene search

MitreCVE-2007-5418

HistoryOct 12, 2007 - 9:17 p.m.

CVE-2007-5418

2007-10-1221:17:00

CWE-94

mitre

web.nvd.nist.gov

cve-2007-5418

php

remote file inclusion

care2x 2g 2.2

security vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.316

Percentile

97.1%

JSON

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) en_copyrite.php, (2) vi_copyrite.php, and (3) ar_copyrite.php in language/ directories; (4) class_access.php, (5) class_department.php, (6) class_config.php, (7) class_image.php, (8) class_ward.php, and (9) class_product.php in include/care_api_classes/; (10) gui/smarty_template/smarty_care.class.php; and possibly other components, different vectors than CVE-2007-1458.

Affected configurations

Nvd

Node

care2x2gMatch2.2

VendorProductVersionCPE
care2x2g2.2cpe:2.3:a:care2x:2g:2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
care2x	2g	2.2	cpe:2.3:a:care2x:2g:2.2:::::::*

References

osvdb.org/43639

osvdb.org/43640

osvdb.org/43641

osvdb.org/43642

osvdb.org/43643

osvdb.org/43644

osvdb.org/43645

osvdb.org/43646

osvdb.org/43647

osvdb.org/43648

securityreason.com/securityalert/3216

securityvulns.com/Rdocument960.html

www.securityfocus.com/archive/1/482006/100/0/threaded

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

High

EPSS

0.316

Percentile

97.1%

JSON

Related for CVE-2007-5418