Lucene search

MitreCVE-2002-1430

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1430

2004-09-0104:00:00

mitre

web.nvd.nist.gov

cve-2002-1430

sympoll

vulnerability

remote

file read

register_globals

php

url parameters

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register_globals is enabled, possibly by modifying certain PHP variables through URL parameters.

Affected configurations

Nvd

Node

synthetic_realitysympollMatch1.2

VendorProductVersionCPE
synthetic_realitysympoll1.2cpe:2.3:a:synthetic_reality:sympoll:1.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
synthetic_reality	sympoll	1.2	cpe:2.3:a:synthetic_reality:sympoll:1.2:::::::*

References

archives.neohapsis.com/archives/bugtraq/2002-07/0401.html

www.iss.net/security_center/static/9723.php

www.ralusp.net/downloads/sympoll/changelog.txt

www.securityfocus.com/bid/5360

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.3

Confidence

Low

EPSS

0.005

Percentile

77.2%

JSON

Related for CVE-2002-1430