Lucene search
HistoryApr 26, 2007 - 9:19 p.m.
CVE-2007-2304
cve
directory traversal
quick and dirty blog
qdblog
vulnerability
remote execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Multiple directory traversal vulnerabilities in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the theme parameter to categories.php and other unspecified files.
Affected configurations
Node
qdblogqdblogRange≤0.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| qdblog:qdblog | qdblog | le | 0.4 |
Related
nvd
nvd
CVE-2007-2304
2007-04-26 21:19:00
cvelist
cvelist
CVE-2007-2304
2007-04-26 21:00:00
prion
prion
Directory traversal
2007-04-26 21:19:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Related for CVE-2007-2304