9.3
CVE-2007-1423
- EPSS 4%
- Veröffentlicht 13.03.2007 01:19:00
- Zuletzt bearbeitet 16.06.2026 22:37:33
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to include/include_top.php and certain other PHP scripts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Work System E-commerce ≫ Work System E-commerce Version3.0.3
Work System E-commerce ≫ Work System E-commerce Version3.0.4
Work System E-commerce ≫ Work System E-commerce Version3.0.5
Work System E-commerce ≫ Work System E-commerce Version3.0.41
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4% | 0.892 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.3 | 8.6 | 10 |
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
http://osvdb.org/33973
http://secunia.com/advisories/24476
http://www.securityfocus.com/bid/22908
http://www.vupen.com/english/advisories/2007/0903
https://www.exploit-db.com/exploits/3448