Vulnerability in Apache Stats

CVE-2007-0975

Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when the extract function is used on the _REQUEST superglobal array.

EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.

Affected products

  • Apache_stats — versions 0.0.1_beta, 0.0.2_beta
  • N/a — versions n/a

References