Lucene search
HistoryMar 02, 2007 - 9:18 p.m.
CVE-2006-7080
cve-2006-7080
directory traversal
exv2
security vulnerability
remote attack
7.7 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
74.2%
Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files via “…” sequences in the old_avatar parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| exv2:content_management_system | exv2 content management system | le | 2.0.4.3 |
7.7 High
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
74.2%