Lucene search
MitreCVE-2007-5822HistoryNov 05, 2007 - 7:46 p.m.
CVE-2007-5822
2007-11-0519:46:00
CWE-94
mitre
web.nvd.nist.gov
17
cve
2007
5822
code injection
vulnerability
forum.php
ben ng scribe
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.025
Percentile
90.3%
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php.
Affected configurations
Node
scribescribeMatch0.2
References
Related
prion
prion
Code injection
2007-11-05 19:46:00
nvd
nvd
CVE-2007-5822
2007-11-05 19:46:00
cvelist
cvelist
CVE-2007-5822
2007-11-05 19:00:00
exploitdb
exploitdb
Scribe 0.2 - PHP Remote Code Execution
2007-11-02 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
High
EPSS
0.025
Percentile
90.3%
Related for CVE-2007-5822