« Volver al listado

CVE-2007-3428

Estado: ModificadaAlta (7.5)—

Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via the file parameter to (1) plotStatBar.php or (2) plotStatPie.php, different vectors than CVE-2007-1076.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Zoneo-soft — Phptraffica

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3428",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-27T00:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/43469",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/43470",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://soft.zoneo.net/phpTrafficA/news.php",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/43469",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/43470",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://soft.zoneo.net/phpTrafficA/news.php",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have an unknown impact via the file parameter to (1) plotStatBar.php or (2) plotStatPie.php, different vectors than CVE-2007-1076."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades no especificadas en phpTrafficA anterior a 1.4.2 permite a atacantes remotos tener impacto desconocido mediante el parámetro file a (1) plotStatBar.php o (2) plotStatPie.php, vectores diferentes de CVE-2007-1076."
    }
  ],
  "lastModified": "2026-06-16T22:42:01.347",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zoneo-soft:phptraffica:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F45BD58-B71A-4020-9C5D-1345D144E6F0",
              "versionEndIncluding": "1.4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}