NVD

Id
53630  
Name
CVE-2007-1446  
Description
Multiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1beta allow remote attackers to execute arbitrary PHP code via a URL in the CONF_INCLUDE_PATH parameter to (1) lib-account.inc.php, (2) lib-file.inc.php, (3) lib-group.inc.php, (4) lib-log.inc.php, (5) lib-mydb.inc.php, (6) lib-template-mod.inc.php, and (7) lib-themes.inc.php in includes/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-13  
Modified Date
2011-03-07  
Seq
2007-1446  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271715 53630 CVE-2007-1446 http://advisories.echo.or.id/adv/adv69-K-159-2007.txt  View
271716 53630 CVE-2007-1446 2421  View
271717 53630 CVE-2007-1446 20070313 [ECHO_ADV_69$2007] OES (Open Educational System) 0.1beta Remote File Inclusion Vulnerability  View
271718 53630 CVE-2007-1446 22934  View
271719 53630 CVE-2007-1446 ADV-2007-0920  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53003 JVNDB-2007-001695 OES における PHP リモートファイルインクルージョンの脆弱性 Open Education System (OES) には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-1446 24801 CVE-2007-1446 53630 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001695.html 2007-03-13 2012-06-26 View