CVE-2007-5682
Published Oct 26, 2007
Last updated 12 years ago
Overview
- Description
- Incomplete blacklist vulnerability in tiki-graph_formula.php in TikiWiki before 1.9.8.2 allows remote attackers to execute arbitrary code by using variable functions and variable variables to write variables whose names match the whitelist, a different vulnerability than CVE-2007-5423.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1C5F236-CF41-4783-901B-E76F615E0F61",
"versionEndIncluding": "1.9.8"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B13501C0-3322-4D0C-8F7F-12535C76CB69"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FB63DA4-E9B5-4BDF-A4E5-54F4EE4E94AA"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADE04A29-E90B-41E1-A8B4-462B54C079B4"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2540703B-63B8-41F4-A17A-0274A7DE7E63"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1489E8DC-11E7-49A3-84FF-909954147D01"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "035EEFAB-B46C-407F-BF8C-B33756D4EEC3"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "127349FA-B76D-402A-B688-F2F44024FA11"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "175D43FD-450F-443E-831B-B8091BE7054F"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F437662-CD55-477B-9FEE-0CC4E6CB908D"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB235741-1FDA-4C90-BD6A-22D18D57D240"
},
{
"criteria": "cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.9.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62C09D81-AA53-4E82-BEA6-D321D95D2E0F"
}
],
"operator": "OR"
}
]
}
]