CVE-2007-2636
Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regular expressions to (1) index.php, (2) feed.php, (3) prefs.php, and (4) todolist.php; and (5) classTodoItem.php and (6)…
Does this matter?
Lower severity and a low EPSS score (1.17%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regular expressions to (1) index.php, (2) feed.php, (3) prefs.php, and (4) todolist.php; and (5) classTodoItem.php and (6) phpTodoUser.php in libs/. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.17% probability · 66th percentile
- CISA KEV
- Not listed
- Affected
- jason frisvold/phptodo
- Source
- cve@mitre.org
References
- http://phptodo.godshell.com/ChangeLogPatch
- http://www.securityfocus.com/bid/23928
- http://www.vupen.com/english/advisories/2007/1774
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34275
- http://phptodo.godshell.com/ChangeLogPatch
- http://www.securityfocus.com/bid/23928
- http://www.vupen.com/english/advisories/2007/1774
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34275
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.