NVD

Id
54773  
Name
CVE-2007-2609  
Description
Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code via a URL in the (a) ETCDIR parameter to (1) libs/lom.php; (2) lom_update.php, (3) check-lom.php, and (4) weigh_keywords.php in scripts/; the (b) LIBSDIR parameter to (5) logout.php, (6) help.php, (7) index.php, (8) login.php; and the ETCDIR parameter to (9) web/lom.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-11  
Modified Date
2011-09-08  
Seq
2007-2609  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
278043 54773 CVE-2007-2609 3876  View
278044 54773 CVE-2007-2609 23883  View
278045 54773 CVE-2007-2609 ADV-2007-1736  View
278046 54773 CVE-2007-2609 gnuedu-etcdir-libsdir-file-include(34174)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53308 JVNDB-2007-002000 gnuedu における PHP リモートファイルインクルージョンの脆弱性 gnuedu には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2609 25964 CVE-2007-2609 54773 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002000.html 2007-05-11 2012-06-26 View