NVD

Id
52821  
Name
CVE-2007-0599  
Description
Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as copying arbitrary files using index/common_actions.php, via vectors associated with extract operations on the (1) POST, (2) GET, (3) COOKIE, and (4) SERVER superglobal arrays.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-01-30  
Modified Date
2008-11-13  
Seq
2007-0599  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266939 52821 CVE-2007-0599 http://acid-root.new.fr/poc/21070125.txt  View
266940 52821 CVE-2007-0599 20070125 Aztek Forum 4.1 Multiple Vulnerabilities Exploit  View
266941 52821 CVE-2007-0599 20070125 Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52783 JVNDB-2007-001475 Aztek Forum の common/config.php における任意のプログラム変数を上書きする脆弱性 Aztek Forum の common/config.php には、変数上書きが発生するため、任意のプログラム変数を上書きされ、index/common_actions.php を使用して任意のファイルをコピーするといった不正な活動実行される脆弱性が存在します。 CVE-2007-0599 23954 CVE-2007-0599 52821 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001475.html 2007-01-30 2012-06-26 View