CVE-2007-5223

{"id": "CVE-2007-5223", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-10-05T00:17:00.000", "references": [{"url": "http://osvdb.org/42342", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/42343", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/42344", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/3191", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/481206/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25882", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/3344", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to include local files and have other unspecified impact, related to incorrect input validation or other defects involving (1) admin/backupstart.php, (2) a .sql filename under admin/admin/dump/, (3) a .sql filename in the fl parameter to admin/downloadbackup.php, and (4) a .. (dot dot) in the fl parameter to admin/downloadbackup.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades no espec\u00edficas en AlstraSoft Affiliate Network Pro permite a atacantes remotos incluir archivos locales y tener otro impacto no especificado, relacionado con la validaci\u00f3n de entrada incorrecta u otros defectos afectando a 1) admin/backupstart.php, (2) un nombre de archivo .sql bajo admin/admin/dump/, (3) un nombre de archivo .sql en el par\u00e1metro fl en admin/downloadbackup.php, y (4) una secuencia .. (punto punto) en el par\u00e1metro fl en admin/downloadbackup.php."}], "lastModified": "2018-10-15T21:41:19.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alstrasoft:affiliate_network_pro:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C93CC628-D066-42C8-9662-666BDE7B5BBF"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}