Lucene search
HistoryNov 18, 2005 - 11:03 p.m.
CVE-2005-3680
cve-2005-3680
directory traversal
xoops 2.2.3
remote attackers
arbitrary local files
6.8 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
70.2%
Directory traversal vulnerability in editor_registry.php in XOOPS 2.2.3 allows remote attackers to read or include arbitrary local files via a … (dot dot) in the xoopsConfig[language] parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| xoops:xoops | xoops | eq | 2.2.3 |
Related
nessus
nessus
6.8 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
70.2%
Related for CVE-2005-3680