« Volver al listado

CVE-2007-4259

Estado: ModificadaMedia (5)—

EZPhotoSales 1.9.3 y versiones anteriores permite a atacantes remotos descargar ficheros de imagen mediante (1) una petición directa de un URL bajo OnlineViewing/galleries/ ó (2) navegación del interfaz de usuario de galería con JavaScript deshabilitado.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

EZ Photo Sales — EZ Photo Sales

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4259",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-08-08T23:17:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/26341",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/2985",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.airscanner.com/security/07080601_ezphotosales.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.informit.com/guides/content.asp?g=security&seqNum=267",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.informit.com/guides/content.asp?g=security&seqNum=268",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/475678/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/25323",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35832",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/26341",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/2985",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.airscanner.com/security/07080601_ezphotosales.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.informit.com/guides/content.asp?g=security&seqNum=267",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.informit.com/guides/content.asp?g=security&seqNum=268",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/475678/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/25323",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35832",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via (1) a direct request for a URL under OnlineViewing/galleries/ or (2) navigation of the gallery user interface with JavaScript disabled."
    },
    {
      "lang": "es",
      "value": "EZPhotoSales 1.9.3 y versiones anteriores permite a atacantes remotos descargar ficheros de imagen mediante (1) una petición directa      de un URL bajo OnlineViewing/galleries/ ó (2) navegación del interfaz de usuario de galería con JavaScript deshabilitado."
    }
  ],
  "lastModified": "2026-06-16T22:43:41.670",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ez_photo_sales:ez_photo_sales:1.9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71EBECDB-13CC-4471-9349-F2E3D1E7A409"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}