CVE-2007-2458

Опубликовано: 02 мая 2007

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg[sys][base_path] parameter to psg.smarty.lib.php and certain include and library scripts, a different vector than CVE-2007-2457.

Ссылки

http://pixaria.com/index.history.php
URL Repurposed
http://secunia.com/advisories/24821
Vendor Advisory
http://www.pixaria.com/news/article/70/
URL Repurposed
http://www.pixaria.com/news/article/71/
Patch
URL Repurposed
http://www.vupen.com/english/advisories/2007/1390
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33662
https://www.exploit-db.com/exploits/3733
http://pixaria.com/index.history.php
URL Repurposed
http://secunia.com/advisories/24821
Vendor Advisory
http://www.pixaria.com/news/article/70/
URL Repurposed
http://www.pixaria.com/news/article/71/
Patch
URL Repurposed
http://www.vupen.com/english/advisories/2007/1390
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33662
https://www.exploit-db.com/exploits/3733

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:pixaria:pixaria_gallery:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.1:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.2:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.3:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.4:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:pixaria:pixaria_gallery:1.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10087

Средний

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-cr23-vq27-p59f

github

почти 4 года назад