CVE-2007-2168

EPSS 3.52%
Published 22.04.2007 19:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP code into config.php via the databasehost parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Aimstats ≫ Aimstats Version <= 3.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.52%	0.872

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://secunia.com/advisories/24955

http://www.securityfocus.com/bid/23573

http://www.vupen.com/english/advisories/2007/1447

http://www.x-pose.org/aimstats.php

https://exchange.xforce.ibmcloud.com/vulnerabilities/33742

https://nvd.nist.gov/vuln/detail/CVE-2007-2168

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2168

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2168

EUVD