Vulnerability in Apache Stats

CVE-2007-0930

Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.

EPSS: 0.011 (63.0th percentile) — read the EPSS interpretation.

Affected products

  • Apache_stats — versions 0.0.1_beta, 0.0.2_beta
  • N/a — versions n/a

References