What’s Vulnerable › Vulnerabilities

CVE-2007-0975

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-02-16 · updated 2026-06-16

Description

Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when the extract function is used on the _REQUEST superglobal array.

Affected products

• Apache Stats: 0.0.1_beta, 0.0.2_beta

References

• http://sourceforge.net/forum/forum.php?forum_id=660919
• http://superb-east.dl.sourceforge.net/sourceforge/apachestats/apacheStats_0.0.3Beta.tar.bz2
• http://www.vupen.com/english/advisories/2007/0598
• http://sourceforge.net/forum/forum.php?forum_id=660919
• http://superb-east.dl.sourceforge.net/sourceforge/apachestats/apacheStats_0.0.3Beta.tar.bz2
• http://www.vupen.com/english/advisories/2007/0598

Get alerted when CVE-2007-0975 or the next vulnerability affects your stack