Lucene search
MitreCVE-2003-1537HistoryNov 14, 2007 - 2:00 a.m.
CVE-2003-1537
2007-11-1402:00:00
CWE-22
mitre
web.nvd.nist.gov
28
postnuke
directory traversal
cve-2003-1537
security vulnerability
remote attack
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
56.5%
Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.
Affected configurations
Node
postnuke_software_foundationpostnukeRange≤0.723
| Vendor | Product | Version | CPE |
|---|---|---|---|
| postnuke_software_foundation | postnuke | * | cpe:2.3:a:postnuke_software_foundation:postnuke:*:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
56.5%
Related for CVE-2003-1537