[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fApQmrGsqfEOke5ccB6klJDihdSwAy8a4jSqT_dxHrao":3,"g5a-risk:CVE-2007-1477":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":37,"affectedProducts":38,"affectedProductsCount":44,"references":45,"referencesCount":70,"weaknesses":71,"weaknessesCount":44,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":109,"notableEvents":110},"CVE-2007-1477","What is CVE-2007-1477?","Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cfg_language parameter. NOTE: this issue has been disputed by CVE, since the cfg_language variable is configured upon proper product installation","Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files v...","2007-03-16T21:19:00","2026-06-16T22:37:39.883",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01546,[36,34,34,34,34,34,34],0.01471,"High",[39],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"oscommerce","php_point_of_sale","1.1","cpe:2.3:a:oscommerce:php_point_of_sale:1.1:*:*:*:*:*:*:*",1,[46,50,54,58,62,64,66,68],{"url":47,"source":48,"tags":49},"http:\u002F\u002Fattrition.org\u002Fpipermail\u002Fvim\u002F2007-April\u002F001564.html","Attrition",[],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F2426","Securityreason",[],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F462970\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F33006","Ibmcloud",[],{"url":47,"source":48,"tags":63},[],{"url":51,"source":52,"tags":65},[],{"url":55,"source":56,"tags":67},[],{"url":59,"source":60,"tags":69},[],8,[72],{"id":73,"name":73,"description":74},"Unknown","NVD-CWE-Other",[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2007-1477? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2007-1477, a high severity cyber security vulnerability from 2007. Directory traversal vulnerability in index.php in PHP Point ...","CVE-2007-1477, CVE-2007-1477 vulnerability, CVE-2007-1477 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2007, CVSS score, exploit, patch, remediation, oscommerce security, php_point_of_sale vulnerability","\u002Fwhat-is\u002Fcve-2007-1477",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2007-1477","Cybersecurity","CVE-2007-1477, CVE-2007-1477 vulnerability, CVE-2007-1477 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":28,"Negate":28,"Nodes":103},[104],{"Operator":105,"Negate":32,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":108,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0FD2039C-A70D-48C5-9AD4-4C004014108F",[],[],{"lastModified":11,"cacheTime":112,"version":22},1792372394946,{"score":114,"band":115,"action":116,"scoredAt":117},47,"Medium","Plan remediation","2026-10-17T06:34:54.535883+00:00"]