Lucene search

[email protected]CVE-2007-0620

HistoryJan 31, 2007 - 11:28 a.m.

CVE-2007-0620

2007-01-3111:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0620

security vulnerability

fd script

information disclosure

nvd

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.027 Low

EPSS

Percentile

90.4%

JSON

download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php.

CPENameOperatorVersion
vlad_leont:fd_scriptvlad leont fd scripteq1.3
vlad_leont:fd_scriptvlad leont fd scripteq1.3.1
vlad_leont:fd_scriptvlad leont fd scripteq1.3.2

CPE	Name	Operator	Version
vlad_leont:fd_script	vlad leont fd script	eq	1.3
vlad_leont:fd_script	vlad leont fd script	eq	1.3.1
vlad_leont:fd_script	vlad leont fd script	eq	1.3.2

References

osvdb.org/33001

secunia.com/advisories/23947

securityreason.com/securityalert/2197

www.securityfocus.com/archive/1/458231/100/0/threaded

www.securityfocus.com/bid/22265

www.vupen.com/english/advisories/2007/0383

exchange.xforce.ibmcloud.com/vulnerabilities/31915

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.027 Low

EPSS

Percentile

90.4%

JSON

Related for CVE-2007-0620

prion1 securityvulns1