NetSight
medium5.0

CVE-2007-0975

Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when th…

Impact

Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when the extract function is used on the _REQUEST superglobal array.

Affected products

VendorProductAffected versions
Apache StatsApache Stats
Versions 0.0.1_beta, 0.0.2_beta

References