7.5
CVE-2007-1715
- EPSS 2.44%
- Veröffentlicht 27.03.2007 21:19:00
- Zuletzt bearbeitet 16.06.2026 22:38:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginPHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the forgot_pass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps CVE-2006-5763.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Free Php Scripts ≫ Free Image Hosting Version1.0
Free Php Scripts ≫ Free Image Hosting Version2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.44% | 0.822 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
https://exchange.xforce.ibmcloud.com/vulnerabilities/33196
https://www.exploit-db.com/exploits/3568
http://osvdb.org/37179