CVE-2015-7381

{"id": "CVE-2015-7381", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-09-28T02:59:14.933", "references": [{"url": "http://www.kb.cert.org/vuls/id/374092", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cret@cert.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to execute arbitrary PHP code via the (1) pathToMYSQL or (2) databaseStructureFile parameter, a different issue than CVE-2015-6008."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inclusi\u00f3n de archivo PHP remoto en install.php en Web Reference Database (tambi\u00e9n conocido como refbase) hasta la versi\u00f3n 0.9.6, permite a atacantes remotos ejecutar c\u00f3digo PHP arbitrario a trav\u00e9s de (1) pathToMYSQL o (2) un par\u00e1metro databaseStructureFile, un problema diferente a CVE-2015-6008."}], "lastModified": "2015-09-29T01:06:51.220", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:refbase:refbase:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CF8564D-694F-4473-A7E8-AA390920219D", "versionEndIncluding": "0.9.6"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}