Lucene search

K
cve[email protected]CVE-2005-3086
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-3086

2022-10-0316:22:37
web.nvd.nist.gov
25
cve-2005-3086
directory traversal
contentserv 3.1
security vulnerability
remote attack

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

Directory traversal vulnerability in admin/about.php in contentServ 3.1 allows remote attackers to read or include arbitrary files via “…” sequences in the ctsWebsite parameter.

Affected configurations

NVD
Node
contentservcontentservMatch3.1

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.3%

Related for CVE-2005-3086