NVD

Id
56608  
Name
CVE-2007-4485  
Description
PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the _SERVER[DOCUMENT_ROOT] parameter. NOTE: it could be argued that this vulnerability is caused by a problem in PHP and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Butterfly online visitors counter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-22  
Modified Date
2008-11-15  
Seq
2007-4485  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288462 56608 CVE-2007-4485 http://securityvulns.com/Rdocument845.html  View
288463 56608 CVE-2007-4485 20070821 Vulnerabilities digest  View
288464 56608 CVE-2007-4485 20071010 Vulnerabilities digest  View
288465 56608 CVE-2007-4485 butterfly-visitor-file-include(36147)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53850 JVNDB-2007-002542 Butterfly オンライン訪問者カウンタの visitor.php における PHP リモートファイルインクルージョンの脆弱性 Butterfly オンライン訪問者カウンタの visitor.php には、不適切な SERVER superglobal 取り扱いされている特定の古いバージョンの PHP で使用されている際、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-4485 27840 CVE-2007-4485 56608 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002542.html 2007-08-22 2012-06-26 View