NVD

Id
54337  
Name
CVE-2007-2167  
Description
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-22  
Modified Date
2011-03-07  
Seq
2007-2167  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275546 54337 CVE-2007-2167 3762  View
275547 54337 CVE-2007-2167 23573  View
275548 54337 CVE-2007-2167 ADV-2007-1447  View
275549 54337 CVE-2007-2167 http://www.x-pose.org/aimstats.php  View
275550 54337 CVE-2007-2167 aimstats-process-command-execution(33742)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53166 JVNDB-2007-001858 AimStats の process.php における PHP コードを挿入される脆弱性 AimStats の process.php には、静的コードを挿入されるため、config.php に PHP コードを挿入される脆弱性が存在します。 CVE-2007-2167 25522 CVE-2007-2167 54337 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001858.html 2007-04-22 2012-06-26 View