Lucene search

[email protected]CVE-2005-4250

HistoryDec 14, 2005 - 11:03 a.m.

CVE-2005-4250

2005-12-1411:03:00

[email protected]

web.nvd.nist.gov

cve-2005-4250

directory traversal

mcgallery pro

remote attack

arbitrary files

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter.

Affected configurations

NVD

Node

mcgallerymcgallery_proMatch1.0

mcgallerymcgallery_proMatch1.1

mcgallerymcgallery_proMatch2.2

CPENameOperatorVersion
mcgallery:mcgallery_promcgallery mcgallery proeq1.0
mcgallery:mcgallery_promcgallery mcgallery proeq1.1
mcgallery:mcgallery_promcgallery mcgallery proeq2.2

CPE	Name	Operator	Version
mcgallery:mcgallery_pro	mcgallery mcgallery pro	eq	1.0
mcgallery:mcgallery_pro	mcgallery mcgallery pro	eq	1.1
mcgallery:mcgallery_pro	mcgallery mcgallery pro	eq	2.2

References

pridels0.blogspot.com/2005/12/mcgallery-pro-vuln.html

secunia.com/advisories/18039

www.osvdb.org/21718

www.vupen.com/english/advisories/2005/2886

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

Related for CVE-2005-4250

cvelist1 nvd1