Lucene search
MitreCVE-2005-1957HistoryJun 14, 2005 - 4:00 a.m.
CVE-2005-1957
2005-06-1404:00:00
CWE-287
mitre
web.nvd.nist.gov
31
cve-2005-1957
mtnpeak.net
file upload manager
unauthorized access
arbitrary files
remote attackers
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.011
Percentile
84.3%
mtnpeak.net File Upload Manager does not properly check user authentication for certain actions, which allows remote attackers to provide a modified base64-encoded file parameter and (1) read arbitrary files via the “view” action or (2) delete arbitrary files via the del action.
Affected configurations
Node
adam_mmedicifile_upload_manager
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adam_mmedici | file_upload_manager | * | cpe:2.3:a:adam_mmedici:file_upload_manager:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.011
Percentile
84.3%
Related for CVE-2005-1957