Every CVE Search/ Get API key

CVE-2007-6459

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary...

6.8 MediumPublic exploit

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

Exploit likelihood

2.87%Down 3.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

Record
CVE-2007-6459
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-94
Updated
2026-11-02
CVE List No score

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

Record
CVE-2007-6459
Updated
2026-11-02
EUVDEUVD-2007-6425 No score

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

Record
EUVD-2007-6425
Updated
2026-11-03
GitHub AdvisoriesGHSA-hmcw-crcx-v3q6 No score

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary...

Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the host parameter to diagdns.php, and (2) the host parameter and possibly (3) the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460.

Record
GHSA-hmcw-crcx-v3q6
Weakness
CWE-94
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBAnon Proxy Server 0.1000 - Remote Command Execution2007-12-14

History

History
RecordedChangedSources
aliasesEUVD
aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6459 is a medium vulnerability (CVSS 6.8) in Anon Proxy Server Proxy Server, published December 20, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.87%, the 86th percentile. No source names a fixed version.

References

MoveEnter Open