Lucene search
HistoryApr 10, 2007 - 11:19 p.m.
CVE-2007-1933
cve
2007
1933
pcp-guestbook
pcp-book
directory traversal
vulnerabilities
remote attackers
arbitrary file execution
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.029 Low
EPSS
Percentile
90.6%
Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dreamcodes:pcp-guestbook | dreamcodes pcp-guestbook | eq | 3.0 |
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.029 Low
EPSS
Percentile
90.6%
Related for CVE-2007-1933