CVE-2007-0246

MEDIUM · CVSS 6.8 EPSS 1.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-05-29 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-0246

Severity

MEDIUM

CVSS

6.8

EPSS

1.82%

Original Filing — NVD Description

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATH_INFO.