CVE-2007-4738

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/26658", "name": "26658", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://osvdb.org/39080", "name": "39080", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39085", "name": "39085", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39102", "name": "39102", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39086", "name": "39086", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39075", "name": "39075", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39079", "name": "39079", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39084", "name": "39084", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39095", "name": "39095", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39103", "name": "39103", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39091", "name": "39091", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39099", "name": "39099", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39073", "name": "39073", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.securityfocus.com/bid/25525", "name": "25525", "tags": [], "refsource": "BID"}, {"url": "http://osvdb.org/39078", "name": "39078", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39096", "name": "39096", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39087", "name": "39087", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39097", "name": "39097", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39101", "name": "39101", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39082", "name": "39082", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39077", "name": "39077", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39092", "name": "39092", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39104", "name": "39104", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39074", "name": "39074", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39083", "name": "39083", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39098", "name": "39098", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39076", "name": "39076", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39105", "name": "39105", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39088", "name": "39088", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39081", "name": "39081", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39089", "name": "39089", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39100", "name": "39100", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39094", "name": "39094", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39090", "name": "39090", "tags": [], "refsource": "OSVDB"}, {"url": "http://osvdb.org/39093", "name": "39093", "tags": [], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36417", "name": "speedtech-stphpimageshow-file-include(36417)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) db_conf or (2) ADODB_DIR parameter to utils/stphpimage_show.php; or a URL in the STPHPLIB_DIR parameter to (3) stphpbutton.php, (4) stphpcheckbox.php, (5) stphpcheckboxwithcaption.php, (6) stphpcheckgroup.php, (7) stphpcomponent.php, (8) stphpcontrolwithcaption.php, (9) stphpedit.php, (10) stphpeditwithcaption.php, (11) stphphr.php, (12) stphpimage.php, (13) stphpimagewithcaption.php, (14) stphplabel.php, (15) stphplistbox.php, (16) stphplistboxwithcaption.php, (17) stphplocale.php, (18) stphppanel.php, (19) stphpradiobutton.php, (20) stphpradiobuttonwithcaption.php, (21) stphpradiogroup.php, (22) stphprichbutton.php, (23) stphpspacer.php, (24) stphptable.php, (25) stphptablecell.php, (26) stphptablerow.php, (27) stphptabpanel.php, (28) stphptabtitle.php, (29) stphptextarea.php, (30) stphptextareawithcaption.php, (31) stphptoolbar.php, (32) stphpwindow.php, (33) stphpxmldoc.php, or (34) stphpxmlelement.php, a different set of vectors than CVE-2007-4737. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-94"}, {"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-4738", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-09-06T19:17Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:speedtech:stphplibrary:0.8.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-29T01:33Z"}