Lucene search

K
cve[email protected]CVE-2003-0275
HistoryJun 16, 2003 - 4:00 a.m.

CVE-2003-0275

2003-06-1604:00:00
NVD-CWE-Other
web.nvd.nist.gov
21
cve-2003-0275
remote code execution
yabb se
ssi.php
security vulnerability
nvd

8.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.0%

SSI.php in YaBB SE 1.5.2 allows remote attackers to execute arbitrary PHP code by modifying the sourcedir parameter to reference a URL on a remote web server that contains the code.

CPENameOperatorVersion
yabb:yabbyabbeq1.5.2

8.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

65.0%

Related for CVE-2003-0275