CVE-2007-0975: Apache Stats

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite critical variables, with unknown impact, when the extract function is used on the _REQUEST superglobal array.

Affected products

• Apache Stats Apache Stats: version 0.0.1_beta only; version 0.0.2_beta only

Published 2007-02-16. Last modified 2026-06-16.