Lucene search
HistoryFeb 19, 2005 - 5:00 a.m.
CVE-2004-1505
cve-2004-1505
directory traversal
index.php
jaf cms 3.0rc
remote attackers
arbitrary files
php code
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.4%
Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a … (dot dot) in the show parameter.
Affected configurations
Node
salims_softhousejaf_cmsMatch3.0rc
| CPE | Name | Operator | Version |
|---|---|---|---|
| salims_softhouse:jaf_cms | salims softhouse jaf cms | eq | 3.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.4%
Related for CVE-2004-1505