CVE-2007-6553

{"id": "CVE-2007-6553", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-12-28T00:46:00.000", "references": [{"url": "http://osvdb.org/39805", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39806", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39807", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39808", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39809", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39810", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39811", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39812", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39813", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39814", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39815", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39816", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39817", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39818", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39819", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39820", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39821", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39822", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39823", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39824", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39825", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39826", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27022", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39212", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/4785", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Multiple PHP remote file inclusion vulnerabilities in TeamCal Pro 3.1.000 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONF[app_root] parameter to (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, or (22) tcuseroption.class.php in includes/, possibly a related issue to CVE-2006-4845."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inclusi\u00f3n remota de fichero PHP en TeamCal Pro 3.1.000 y versiones anteriores. Permite que atacantes remotos ejecuten c\u00f3digo PHP a su elecci\u00f3n, a trav\u00e9s de una URL en el par\u00e1metro CONF[app_root] pasado a (1) tcuser.class.php, (2) absencecount.inc.php, (3) avatar.inc.php, (4) csvhandler.class.php, (5) functions.tcpro.php, (6) header.html.inc.php, (7) joomlajack.tcpro.php, (8) menu.inc.php, (9) other.inc.php, (10) tcabsence.class.php, (11) tcabsencegroup.class.php, (12) tcallowance.class.php, (13) tcannouncement.class.php, (14) tcconfig.class.php, (15) tcdaynote.class.php, (16) tcgroup.class.php, (17) tcholiday.class.php, (18) tclogin.class.php, (19) tcmonth.class.php, (20) tctemplate.class.php, (21) tcusergroup.class.php, o (22) tcuseroption.class.php en el directorio includes/. Posiblmente, un problema relacionado con CVE-2006-4845."}], "lastModified": "2017-09-29T01:29:59.423", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:george_lewe:teamcal_pro:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9E51DF1-C1FB-43B7-88DA-7BFB6F4C7618", "versionEndIncluding": "3.1.000"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}