VulnerabilityModified
CVE-2007-2316
Unspecified vulnerability in the admin script in Open Business Management (OBM) before 2.0.0 allows remote attackers to have an unknown impact by calling the script "in txt mode from a browser."
HIGH 10.0EPSS 2.24%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.24%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the admin script in Open Business Management (OBM) before 2.0.0 allows remote attackers to have an unknown impact by calling the script "in txt mode from a browser."
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 2.24% probability · 82th percentile
- CISA KEV
- Not listed
- Affected
- open business management/open business management
- Source
- cve@mitre.org
References
- http://obm.aliasource.org/changelogs/changelog-2.0.html
- http://osvdb.org/34899
- http://secunia.com/advisories/24775Patch, Vendor Advisory
- http://www.securityfocus.com/bid/23472
- http://www.vupen.com/english/advisories/2007/1376
- http://obm.aliasource.org/changelogs/changelog-2.0.html
- http://osvdb.org/34899
- http://secunia.com/advisories/24775Patch, Vendor Advisory
- http://www.securityfocus.com/bid/23472
- http://www.vupen.com/english/advisories/2007/1376
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.