NVD

CVE-2007-1790 Detail

Modified

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

Current Description

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP code via a URL in the install_root parameter to (1) support.inc.php, (2) function.inc.php, (3) rdal_object.inc.php, (4) rdal_editor.inc.php. (5) login.inc.php, (6) request.inc.php, and (7) categories.inc.php in include/core/; (8) save.inc.php, (9) preview.inc.php, (10) edit_item.inc.php, (11) new_item.inc.php, and (12) item_info.inc.php in include/display/item/; (13) search.inc.php, (14) item_edit.inc.php, (15) register_succsess.inc.php, (16) context_menu.inc.php, (17) item_repost.inc.php, (18) balance.inc.php, (19) featured.inc.php, (20) user.inc.php, (21) buynow.inc.php, (22) install_complete.inc.php, (23) fees_info.inc.php, (24) user_feedback.inc.php, (25) admin_balance.inc.php, (26) activate.inc.php, (27) user_info.inc.php, (28) member.inc.php, (29) add_bid.inc.php, (30) items_filter.inc.php, (31) my_info.inc.php, (32) register.inc.php, (33) leave_feedback.inc.php, and (34) user_auctions.inc.php in include/display/; and (35) design/form.inc.php, (36) processor.inc.php, (37) interfaces.inc.php (38) left_menu.inc.php, (39) login.inc.php, and (40) categories.inc.php in include/.

View Analysis Description

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: 6.8 MEDIUM

Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource
http://secunia.com/advisories/24696	Vendor Advisory
http://secunia.com/advisories/24696	Vendor Advisory
http://www.osvdb.org/34545
http://www.osvdb.org/34545
http://www.osvdb.org/34546
http://www.osvdb.org/34546
http://www.osvdb.org/34547
http://www.osvdb.org/34547
http://www.osvdb.org/34548
http://www.osvdb.org/34548
http://www.osvdb.org/34549
http://www.osvdb.org/34549
http://www.osvdb.org/34550
http://www.osvdb.org/34550
http://www.osvdb.org/34551
http://www.osvdb.org/34551
http://www.osvdb.org/34552
http://www.osvdb.org/34552
http://www.osvdb.org/34553
http://www.osvdb.org/34553
http://www.osvdb.org/34554
http://www.osvdb.org/34554
http://www.osvdb.org/34555
http://www.osvdb.org/34555
http://www.osvdb.org/34556
http://www.osvdb.org/34556
http://www.osvdb.org/34557
http://www.osvdb.org/34557
http://www.osvdb.org/34558
http://www.osvdb.org/34558
http://www.osvdb.org/34559
http://www.osvdb.org/34559
http://www.osvdb.org/34560
http://www.osvdb.org/34560
http://www.osvdb.org/34561
http://www.osvdb.org/34561
http://www.osvdb.org/34562
http://www.osvdb.org/34562
http://www.osvdb.org/34563
http://www.osvdb.org/34563
http://www.osvdb.org/34564
http://www.osvdb.org/34564
http://www.osvdb.org/34565
http://www.osvdb.org/34565
http://www.osvdb.org/34566
http://www.osvdb.org/34566
http://www.osvdb.org/34567
http://www.osvdb.org/34567
http://www.osvdb.org/34568
http://www.osvdb.org/34568
http://www.osvdb.org/34569
http://www.osvdb.org/34569
http://www.osvdb.org/34570
http://www.osvdb.org/34570
http://www.osvdb.org/34571
http://www.osvdb.org/34571
http://www.osvdb.org/34572
http://www.osvdb.org/34572
http://www.osvdb.org/34573
http://www.osvdb.org/34573
http://www.osvdb.org/34574
http://www.osvdb.org/34574
http://www.osvdb.org/34575
http://www.osvdb.org/34575
http://www.osvdb.org/34576
http://www.osvdb.org/34576
http://www.osvdb.org/34577
http://www.osvdb.org/34577
http://www.osvdb.org/34578
http://www.osvdb.org/34578
http://www.osvdb.org/34579
http://www.osvdb.org/34579
http://www.osvdb.org/34580
http://www.osvdb.org/34580
http://www.osvdb.org/34581
http://www.osvdb.org/34581
http://www.osvdb.org/34582
http://www.osvdb.org/34582
http://www.osvdb.org/34583
http://www.osvdb.org/34583
http://www.osvdb.org/34584
http://www.osvdb.org/34584
http://www.securityfocus.com/bid/23211
http://www.securityfocus.com/bid/23211
http://www.vupen.com/english/advisories/2007/1180	Vendor Advisory
http://www.vupen.com/english/advisories/2007/1180	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33335
https://exchange.xforce.ibmcloud.com/vulnerabilities/33335
https://www.exploit-db.com/exploits/3607
https://www.exploit-db.com/exploits/3607

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-94	Improper Control of Generation of Code ('Code Injection')	NIST

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

5 change records found show changes

CVE Modified by CVE 11/20/2024 7:29:09 PM

Action	Type	New Value
Added	Reference	http://secunia.com/advisories/24696
Added	Reference	http://www.osvdb.org/34545
Added	Reference	http://www.osvdb.org/34546
Added	Reference	http://www.osvdb.org/34547
Added	Reference	http://www.osvdb.org/34548
Added	Reference	http://www.osvdb.org/34549
Added	Reference	http://www.osvdb.org/34550
Added	Reference	http://www.osvdb.org/34551
Added	Reference	http://www.osvdb.org/34552
Added	Reference	http://www.osvdb.org/34553
Added	Reference	http://www.osvdb.org/34554
Added	Reference	http://www.osvdb.org/34555
Added	Reference	http://www.osvdb.org/34556
Added	Reference	http://www.osvdb.org/34557
Added	Reference	http://www.osvdb.org/34558
Added	Reference	http://www.osvdb.org/34559
Added	Reference	http://www.osvdb.org/34560
Added	Reference	http://www.osvdb.org/34561
Added	Reference	http://www.osvdb.org/34562
Added	Reference	http://www.osvdb.org/34563
Added	Reference	http://www.osvdb.org/34564
Added	Reference	http://www.osvdb.org/34565
Added	Reference	http://www.osvdb.org/34566
Added	Reference	http://www.osvdb.org/34567
Added	Reference	http://www.osvdb.org/34568
Added	Reference	http://www.osvdb.org/34569
Added	Reference	http://www.osvdb.org/34570
Added	Reference	http://www.osvdb.org/34571
Added	Reference	http://www.osvdb.org/34572
Added	Reference	http://www.osvdb.org/34573
Added	Reference	http://www.osvdb.org/34574
Added	Reference	http://www.osvdb.org/34575
Added	Reference	http://www.osvdb.org/34576
Added	Reference	http://www.osvdb.org/34577
Added	Reference	http://www.osvdb.org/34578
Added	Reference	http://www.osvdb.org/34579
Added	Reference	http://www.osvdb.org/34580
Added	Reference	http://www.osvdb.org/34581
Added	Reference	http://www.osvdb.org/34582
Added	Reference	http://www.osvdb.org/34583
Added	Reference	http://www.osvdb.org/34584
Added	Reference	http://www.securityfocus.com/bid/23211
Added	Reference	http://www.vupen.com/english/advisories/2007/1180
Added	Reference	https://exchange.xforce.ibmcloud.com/vulnerabilities/33335
Added	Reference	https://www.exploit-db.com/exploits/3607

Quick Info

CVE Dictionary Entry:
CVE-2007-1790
NVD Published Date:
03/31/2007
NVD Last Modified:
11/20/2024
Source:
MITRE

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2007-1790 Detail

Current Description

Analysis Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by CVE 11/20/2024 7:29:09 PM

CVE Modified by MITRE 5/13/2024 9:44:14 PM

CVE Modified by MITRE 10/10/2017 9:31:59 PM

CVE Modified by MITRE 7/28/2017 9:30:59 PM

Initial CVE Analysis 4/02/2007 2:49:00 PM

Quick Info