Lucene search

K
cve[email protected]CVE-2007-1140
HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1140

2007-03-0221:18:00
CWE-22
web.nvd.nist.gov
22
cve-2007-1140
directory traversal
remote attackers
file modification
vulnerability
information security

6.9 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:C/A:N

0.02 Low

EPSS

Percentile

88.8%

Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a … (dot dot) in the filename parameter.

CPENameOperatorVersion
barekoncept:pheapbarekoncept pheapeq-

6.9 Medium

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:C/A:N

0.02 Low

EPSS

Percentile

88.8%

Related for CVE-2007-1140