Lucene search

[email protected]NVD:CVE-2007-2260

HistoryApr 25, 2007 - 5:19 p.m.

CVE-2007-2260

2007-04-2517:19:00

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.258

Percentile

96.8%

JSON

Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to (1) unavailable.php, (2) source.php, (3) log.php, (4) latex.php, (5) indexinfo.php, (6) index.php, (7) importinfo.php, (8) import.php, (9) examplefile.php, (10) clearinfo.php, (11) clear.php, (12) aboutinfo.php, (13) about.php, and other unspecified files.

Affected configurations

Nvd

Node

bibtexmaseMatch2.0_beta

VendorProductVersionCPE
bibtexmase2.0_betacpe:2.3:a:bibtex:mase:2.0_beta:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bibtex	mase	2.0_beta	cpe:2.3:a:bibtex:mase:2.0_beta:::::::*

References

osvdb.org/35621

osvdb.org/35622

osvdb.org/35623

osvdb.org/35624

osvdb.org/35625

osvdb.org/35626

osvdb.org/35627

osvdb.org/35628

osvdb.org/35629

osvdb.org/35630

osvdb.org/35631

osvdb.org/35632

osvdb.org/35633

securityreason.com/securityalert/2624

www.securityfocus.com/archive/1/466683/100/0/threaded

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.258

Percentile

96.8%

JSON

Related for NVD:CVE-2007-2260

cvelist1 prion1 cve1