Lucene search

K
cve[email protected]CVE-2001-1050
HistoryFeb 02, 2002 - 5:00 a.m.

CVE-2001-1050

2002-02-0205:00:00
web.nvd.nist.gov
26
infosec
cccsoftware
php script
vulnerability
remote attack
http request

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%

CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Affected configurations

NVD
Node
cccsoftwarecccMatch0.91
OR
cccsoftwarecccMatch0.92
OR
cccsoftwarecccMatch0.94
OR
cccsoftwarecccMatch0.95
OR
cccsoftwarecccMatch0.96
OR
cccsoftwarecccMatch0.97
OR
cccsoftwarecccMatch0.98
OR
cccsoftwarecccMatch0.99
OR
cccsoftwarecccMatch1.0
OR
cccsoftwarecccMatch1.02
OR
cccsoftwarecccMatch1.03

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.1%

Related for CVE-2001-1050