CVE-2007-2521

Published May 8, 2007

Last updated 7 years ago

Overview

Description: PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-94

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:e-gads:e-gads:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6A9C327D-32CC-4B27-BD77-524217521548",
            "versionEndIncluding": "2.2.6"
          },
          {
            "criteria": "cpe:2.3:a:e-gads:e-gads:2.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C0247FAD-9267-4414-8F10-0AF085049874"
          },
          {
            "criteria": "cpe:2.3:a:e-gads:e-gads:2.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1F6B100A-3C85-4FAF-A85E-AA91D8E3AE66"
          },
          {
            "criteria": "cpe:2.3:a:e-gads:e-gads:2.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D051B07-CBBC-4037-B3B4-95C2364C9A1A"
          },
          {
            "criteria": "cpe:2.3:a:e-gads:e-gads:2.2.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F36A30F9-33D7-4E5F-AA36-AA1DACE4D682"
          },
          {
            "criteria": "cpe:2.3:a:e-gads:e-gads:2.2.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21380EC3-F7B9-4376-AE9A-F8388F09AD2D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References