« Volver al listado

CVE-2007-1451

Estado: ModificadaMedia (6.4)—

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" (cleanup.php) and then "Suppression des fichiers d'installation" (delete.php).

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Guppy — Guppy

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1451",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-03-14T18:19:00.000",
  "references": [
    {
      "url": "http://forums.avenir-geopolitique.net/viewtopic.php?t=2728",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/35085",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/2433",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/462584/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forums.avenir-geopolitique.net/viewtopic.php?t=2728",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/35085",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/2433",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/462584/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting \"Installation propre\" (cleanup.php) and then \"Suppression des fichiers d'installation\" (delete.php)."
    },
    {
      "lang": "es",
      "value": "GuppY 4.0 permite a atacantes remotos borrar ficheros de su elección mediante una petición directa al install/install.php, luego se selecciona \"Installation propre\" (cleanup.php) y luego \"Suppression des fichiers d'installation\" (delete.php)."
    }
  ],
  "lastModified": "2026-06-16T22:37:36.583",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:guppy:guppy:4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7A294A5-4564-435F-99F6-CE82218E49ED"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}