CVE-2007-1408
Multiple vulnerabilities in (1) bank.php, (2) landfill.php, (3) outposts.php, (4) tribes.php, (5) house.php, (6) tribearmor.php, (7) tribea…
Published 19 y ago · modified 4 mo ago · JSON
Summary
Multiple vulnerabilities in (1) bank.php, (2) landfill.php, (3) outposts.php, (4) tribes.php, (5) house.php, (6) tribearmor.php, (7) tribeastral.php, (8) tribeware.php, and (9) includes/head.php in Bartek Jasicki Vallheru before 1.3 beta have unknown impact and remote attack vectors, probably related to large integer values containing more than 15 digits. NOTE: the original vendor report is for integer overflows, but this is probably an incorrect usage of the term.
Exploit prediction (EPSS)
1.52% probability of exploitation in the next 30 days, higher than 75% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- vallheru.svn.sourceforge.net /viewvc/vallheru/vallheru2/bank.php?r1=910&r2=918 · x_refsource_MISC, x_transferred
- sourceforge.net /project/shownotes.php?release_id=491871&group_id=118350 · x_refsource_CONFIRM, x_transferred
- sourceforge.net /forum/forum.php?forum_id=672237 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2007-1408
- NVD: CVE-2007-1408
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.