CVE-2015-3640

{"id": "CVE-2015-3640", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "published": "2017-07-21T14:29:00.570", "references": [{"url": "http://www.openwall.com/lists/oss-security/2015/05/04/4", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1032250", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "phpMyBackupPro 2.5 and earlier does not properly escape the \".\" character in request parameters, which allows remote authenticated users with knowledge of a web-accessible and web-writeable directory on the target system to inject and execute arbitrary PHP scripts by injecting scripts via the path, filename, and dirs parameters to scheduled.php, and making requests to injected scripts."}, {"lang": "es", "value": "phpMyBackupPro versi\u00f3n 2.5 y anteriores, no escapan apropiadamente del car\u00e1cter \".\" en los par\u00e1metros de petici\u00f3n, que permite a los usuarios autenticados remotos con conocimiento de un directorio web accesible y escribible en el sistema de destino inyectar y ejecutar scripts PHP arbitrarios mediante la inyecci\u00f3n scripts por medio de los par\u00e1metros path, filename y dirs en el archivo schedule.php, y hacer peticiones en scripts inyectados."}], "lastModified": "2017-07-25T16:41:35.393", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phpmybackuppro:phpmybackuppro:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9EF59DD-8BB0-461C-8D22-9BFFE222B02E", "versionEndIncluding": "2.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}