CVE-2007-2251
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to...
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
- Record
CVE-2007-2251- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
- Record
CVE-2007-2251- Updated
- 2026-11-02
EUVDEUVD-2007-2246 No score
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
- Record
EUVD-2007-2246- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-842j-cgp8-h39h No score
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to...
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspecified vectors, probably related to incorrect permission checking in xartemplates/user-view.xd.
- Record
GHSA-842j-cgp8-h39h- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2251 is a high vulnerability (CVSS 7.5) in Xaraya, published April 25, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.42%, the 73rd percentile. No source names a fixed version.
References
xaraya.com/index.php/news/772
exchange.xforce.ibmcloud.com/vulnerabilities/33844
vupen.com/english/advisories/2007/1522
secunia.com/advisories/24959
sourceforge.net/project/shownotes.php?release_id=503035
osvdb.org/35304
securityfocus.com/bid/23631
nvd.nist.gov/vuln/detail/CVE-2007-2251
github.com/advisories/GHSA-842j-cgp8-h39h