7.5
CVE-2007-0930
- EPSS 1.13%
- Veröffentlicht 14.02.2007 11:28:00
- Zuletzt bearbeitet 16.06.2026 22:36:35
- Erkennungen
LoginVariable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache Stats ≫ Apache Stats Version 0.0.1_beta
Apache Stats ≫ Apache Stats Version 0.0.2_beta
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.13% | 0.621 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://sourceforge.net/forum/forum.php?forum_id=660919
http://www.securityfocus.com/bid/22388
http://www.vupen.com/english/advisories/2007/0559