CVE-2007-0975 in Apache Stats

Summary

Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when the extract function is used on the _REQUEST superglobal array.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 02/15/2007
• Disclosure: 02/15/2007
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: Unknown
• CVSS: 5.3
• EPSS: 0.00458
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-0975
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-0975
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-0975/