CVE-2007-0930
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
Vulnerabilidad de extracción de variables en Apache Stats versiones anteriores a 0.0.3beta permite a atacantes remotos modificar variables de su elección y perpetrar ataques mediante vectores desconocidos involucrando el uso de la función de extracción de PHP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-02-13 CVE Reserved
- 2007-02-14 CVE Published
- 2024-07-09 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.vupen.com/english/advisories/2007/0559 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://sourceforge.net/forum/forum.php?forum_id=660919 | 2011-03-08 | |
| http://www.securityfocus.com/bid/22388 | 2011-03-08 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apache Stats Search vendor "Apache Stats" | Apache Stats Search vendor "Apache Stats" for product "Apache Stats" | 0.0.1_beta Search vendor "Apache Stats" for product "Apache Stats" and version "0.0.1_beta" | - |
Affected
| ||||||
| Apache Stats Search vendor "Apache Stats" | Apache Stats Search vendor "Apache Stats" for product "Apache Stats" | 0.0.2_beta Search vendor "Apache Stats" for product "Apache Stats" and version "0.0.2_beta" | - |
Affected
| ||||||