CVE-2007-2167 Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.
HighCVSS 7.5
EPSS 44.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aimstats | = 3.2 | No fix listed |
References
- 24955 third-party-advisory
- 23573 vdb-entry
- ADV-2007-1447 vdb-entry
- www.x-pose.org
- aimstats-process-command-execution(33742) vdb-entry
- 3762 exploit