NVD

Id
55147  
Name
CVE-2007-2988  
Description
A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a request to admin/create_engine.php followed by a request to admin/generate_tabs.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-06-01  
Modified Date
2008-11-15  
Seq
2007-2988  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280225 55147 CVE-2007-2988 2763  View
280226 55147 CVE-2007-2988 4004  View
280227 55147 CVE-2007-2988 20070528 Inout Meta Searh engine Remote Code Execution  View
280228 55147 CVE-2007-2988 24189  View
280229 55147 CVE-2007-2988 24199  View
280230 55147 CVE-2007-2988 inout-searchengine-create-code-execution(34563)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55246 JVNDB-2007-003938 Inout Meta Search Engine の特定の admin スクリプトにおける任意の PHP コードを挿入される脆弱性 Inout Meta Search Engine の特定の admin スクリプトは、管理資格情報が欠如している際、Web ブラウザを終了せずにリダイレクトを送信するするため、任意の PHP コードを挿入される脆弱性が存在します。 CVE-2007-2988 26343 CVE-2007-2988 55147 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003938.html 2007-06-01 2012-09-25 View