CVE-2007-0930
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify...
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
Exploit likelihood
What each source reports
NVD Score used
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
- Record
CVE-2007-0930- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
- Record
CVE-2007-0930- Updated
- 2026-11-02
EUVDEUVD-2007-0924 No score
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
- Record
EUVD-2007-0924- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fg62-m793-pffq No score
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify...
Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unknown vectors involving the use of PHP's extract function.
- Record
GHSA-fg62-m793-pffq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0930 is a high vulnerability (CVSS 7.5) in Apache Stats Stats, published February 14, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. No source names a fixed version.