SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2007-5423

tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

http://www.securityfocus.com/archive/1/482006/100/0/threaded

http://www.securityfocus.com/archive/1/482128/100/0/threaded

http://bugs.gentoo.org/show_bug.cgi?id=195503

http://securityvulns.ru/Sdocument162.html

http://sourceforge.net/forum/forum.php?forum_id=744898

http://sourceforge.net/project/shownotes.php?release_id=546283&group_id=64258

tikiwiki-tikigraphformula-command-execution(37076)


30389



423868



247085



909



194218



282