CVE-2007-2736: Critical severity Apple A Ux vulnerability
Published May 17, 2007
·Updated
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the configatkroot parameter.
Affected Software
18 affected components
Apple A Ux
Apple iOS and macOS
HP HP-UX
HP Tru64
IBM Os2
Linux Linux kernel
Microsoft Windows 2000
Microsoft Windows 2003 Server
Microsoft Windows 95
Microsoft Windows 98=gold
Microsoft Windows 98SE
Microsoft Windows Me
Microsoft Windows NT=4.0
Microsoft Windows XP
Santa Cruz Operation Sco Unix
Sun Solaris
Windriver Bsdos
Achievo Achievo=1.1.0
Event History
May 17, 2007
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
07:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2007-2736?
CVE-2007-2736 has been classified as a critical vulnerability due to the potential for arbitrary PHP code execution.
2
How do I fix CVE-2007-2736?
To rectify CVE-2007-2736, upgrade Achievo to a version later than 1.1.0 where the vulnerability has been patched.
3
What impact does CVE-2007-2736 have on my system?
CVE-2007-2736 can allow remote attackers to execute arbitrary scripts, leading to compromise and loss of control of the affected server.
4
Which software is affected by CVE-2007-2736?
CVE-2007-2736 specifically affects Achievo version 1.1.0.
5
Can CVE-2007-2736 be exploited remotely?
Yes, CVE-2007-2736 can be exploited remotely, enabling attackers to execute harmful code without physical access.