CVE-2007-2167

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an…

published April 22, 2007

CVSS

—

EPSS

44%

Percentile

98.8

In the wild

Unconfirmed

What it is

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.44433 · 98.8th percentile
Published: 2007-04-22T19:00Z

EPSS history

Timeline

22 APR 19:00Z
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an…
cvelistv5