CVE-2007-2167

None

CVSS

—

EPSS

44.4%

Published

Apr 22, 2007

CISA due date

—

The record

Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.

Affected packages

Ecosystem	Package	Introduced	Fixed