NVD

Id
57299  
Name
CVE-2007-5223  
Description
Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving (1) admin/backupstart.php, (2) a .sql filename under admin/admin/dump/, (3) a .sql filename in the fl parameter to admin/downloadbackup.php, and (4) a .. (dot dot) in the fl parameter to admin/downloadbackup.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-10-04  
Modified Date
2011-03-07  
Seq
2007-5223  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292574 57299 CVE-2007-5223 3191  View
292575 57299 CVE-2007-5223 20070929 Affiliate Network Pro Multiple Input Validation and Local file inclusion  View
292576 57299 CVE-2007-5223 25882  View
292577 57299 CVE-2007-5223 ADV-2007-3344  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54036 JVNDB-2007-002728 AlstraSoft Affiliate Network Pro におけるローカルファイルをインクルードされる脆弱性 AlstraSoft Affiliate Network Pro には、誤った入力検証または以下に関連する不備があるため、ローカルファイルをインクルードされる脆弱性が存在します。 CVE-2007-5223 28578 CVE-2007-5223 57299 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002728.html 2007-10-04 2012-06-26 View