CVE-2007-2167

EPSS 2.61%
Published 22.04.2007 19:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Aimstats ≫ Aimstats Version3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.61%	0.85

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/24955

http://www.securityfocus.com/bid/23573

http://www.vupen.com/english/advisories/2007/1447

http://www.x-pose.org/aimstats.php

https://exchange.xforce.ibmcloud.com/vulnerabilities/33742

https://www.exploit-db.com/exploits/3762

https://nvd.nist.gov/vuln/detail/CVE-2007-2167

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2167

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2167

EUVD