CVE-2007-0764

{"id": "CVE-2007-0764", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-02-06T02:28:00.000", "references": [{"url": "http://osvdb.org/34669", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32189", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/3255", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP scripts via GIF86 header in a file in the uplf parameter, which can be later accessed via a relative pathname in the dir parameter in adm.php."}, {"lang": "es", "value": "Vulnerabilidad de env\u00edo de archivos no restringido en F3Site 2.1 y anteriores permite a administradores autenticados remotamente enviar y ejecutar secuencias de comandos PHP de su elecci\u00f3n mediante la cabecera GIF86 en un archivo en el par\u00e1metro uplf, que puede ser accedido m\u00e1s tarde mediante un nombre de ruta relativo en el par\u00e1metro dir de adm.php."}], "lastModified": "2017-10-19T01:30:04.613", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f3site:f3site:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C63C8A03-34F1-442C-8073-5E7A75DF57F0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}