« Volver al listado

CVE-2007-1574

Estado: ModificadaMedia (5)—

CARE2X 2.2 y, posiblemente, versiones anteriores permite a atacantes remotos obtener información de la configuración mediante una petición directa al phpinfo.php que llama a la función phpinfo. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Care2x — Care2x

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1574",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-21T21:19:00.000",
  "references": [
    {
      "url": "http://osvdb.org/34044",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/24481",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/34044",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/24481",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."
    },
    {
      "lang": "es",
      "value": "CARE2X 2.2 y, posiblemente, versiones anteriores permite a atacantes remotos obtener información de la configuración mediante una petición directa al phpinfo.php que llama a la función phpinfo. NOTA: la procedencia de esta información es desconocida; los detalles se obtienen a partir de la información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:37:51.593",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:care2x:care2x:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27DF0904-5694-4592-93BA-DFB1EFB6E733",
              "versionEndIncluding": "2.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}