PT-2007-6692 · Jeebles · Jeebles Directory

Publicado 2007-10-29 · Atualizado 2017-07-29 · CVE-2007-5705

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Jeebles Directory version 2.9.60

Description The issue concerns an unspecified vulnerability in the Settings component of the administration system. It allows remote authenticated administrators to execute arbitrary PHP code. The vulnerability is related to the settings.inc.php file.

Recommendations For Jeebles Directory version 2.9.60, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-5705

Produtos afetados

Jeebles Directory

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-5705 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37379 · Nota
• http://secunia.com/advisories/27345 · Aviso do Fabricante