Lucene search

K
cve[email protected]CVE-2007-4585
HistoryAug 29, 2007 - 1:17 a.m.

CVE-2007-4585

2007-08-2901:17:00
CWE-22
web.nvd.nist.gov
23
cve
2007
4585
directory traversal
vulnerability
activateuser.php
2532|gigs 1.2.1
remote attack
arbitrary local files

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.7%

Directory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the language parameter.

CPENameOperatorVersion
2532gigs:2532gigs2532gigseq1.2.1

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.023 Low

EPSS

Percentile

89.7%

Related for CVE-2007-4585