« Volver al listado

CVE-2007-3217

Estado: ModificadaAlta (7.5)—

Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the path_inc parameter to (1) index.php in gestion/; (2) identification.php, (3) disconnect.php, (4) loginliste.php, (5) loginmodif.php, (6) index.php, and (7) ident.inc.php in ident/; (8) menuadministration.php and (9) menuprincipal.php in menu/; (10) param.inc.php in param/; (11) index.php in plugins/phpgacl/; and (12) index.php and (13) common.inc.php.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Prototype OF AN PHP Application — Prototype OF AN PHP Application

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3217",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-14T22:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/37149",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37150",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37151",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37152",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37153",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37154",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37155",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37156",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37157",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37158",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37159",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37160",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37161",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/2812",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/470245/100/100/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24266",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34679",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/37149",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37150",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37151",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37152",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37153",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37154",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37155",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37156",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37157",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37158",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37159",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37160",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/37161",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/2812",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/470245/100/100/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24266",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34679",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the path_inc parameter to (1) index.php in gestion/; (2) identification.php, (3) disconnect.php, (4) loginliste.php, (5) loginmodif.php, (6) index.php, and (7) ident.inc.php in ident/; (8) menuadministration.php and (9) menuprincipal.php in menu/; (10) param.inc.php in param/; (11) index.php in plugins/phpgacl/; and (12) index.php and (13) common.inc.php."
    },
    {
      "lang": "es",
      "value": "Múltiples vulnerabilidades de inclusión remota de archivo en PHP en Prototype de una aplicación PHP 0.1 permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en el parámetro path_inc en (1) index.php en gestion/; (2) identification.php, (3) disconnect.php, (4) loginliste.php, (5) loginmodif.php, (6) index.php, y (7) ident.inc.php en ident/; (8) menuadministration.php y (9) menuprincipal.php en menu/; (10) param.inc.php en param/; (11) index.php en plugins/phpgacl/; y (12) index.php y (13) common.inc.php."
    }
  ],
  "lastModified": "2026-06-16T22:41:17.510",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:prototype_of_an_php_application:prototype_of_an_php_application:0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3C12171-E152-47B3-8F28-622F0566616B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}