CVE-2007-5984

Published: Nov 15, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."

Affected (15)

Products: Justin Hagstrom: Autoindex Php Script

Justin Hagstrom

1 product

Autoindex Php Script

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Justin Hagstrom Autoindex Php Script	Version 2.0.0
Justin Hagstrom Autoindex Php Script	Version 2.0.1
Justin Hagstrom Autoindex Php Script	Version 2.0.2
Justin Hagstrom Autoindex Php Script	Version 2.0.3
Justin Hagstrom Autoindex Php Script	Version 2.0.4
Justin Hagstrom Autoindex Php Script	Version 2.0.5
Justin Hagstrom Autoindex Php Script	Version 2.0.6
Justin Hagstrom Autoindex Php Script	Version 2.0.7
Justin Hagstrom Autoindex Php Script	Version 2.1.0
Justin Hagstrom Autoindex Php Script	Version 2.1.1
Justin Hagstrom Autoindex Php Script	Version 2.1.2
Justin Hagstrom Autoindex Php Script	Version 2.2.0
Justin Hagstrom Autoindex Php Script	Version 2.2.1
Justin Hagstrom Autoindex Php Script	Version 2.2.2
Justin Hagstrom Autoindex Php Script	Version 2.2.3