Lucene search

K
cve[email protected]CVE-2007-2285
HistoryApr 26, 2007 - 7:19 p.m.

CVE-2007-2285

2007-04-2619:19:00
NVD-CWE-Other
web.nvd.nist.gov
35
cve-2007-2285
directory traversal
jack slocum ext 1.0 alpha1
ext js
feed-proxy.php
remote attackers

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.03 Low

EPSS

Percentile

90.7%

Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a … (dot dot) in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent.

6.9 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.03 Low

EPSS

Percentile

90.7%

Related for CVE-2007-2285