CVE-2007-1986
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/04/2007
Last modified:
11/10/2017
Description
Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to template/barnraiser_01/maint_contact_view.tpl.php, and the (3) template_path parameter to template/barnraiser_01/default.tpl.php. NOTE: this issue might overlap CVE-2006-5533.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:barnraiser:aroundme:0.7.7:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page