Lucene search
HistoryMay 01, 2007 - 10:19 a.m.
CVE-2007-2412
seir anphin
directory traversal vulnerability
file.php
remote attackers
sensitive information
cve-2007-2412
nvd
6.9 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.005 Low
EPSS
Percentile
74.8%
Directory traversal vulnerability in modules/file.php in Seir Anphin allows remote attackers to obtain sensitive information via a … (dot dot) in the a[filepath] parameter. NOTE: a third party has disputed this issue because the a array is populated by a database query before use
| CPE | Name | Operator | Version |
|---|---|---|---|
| seir_anphin:seir_anphin | seir anphin | eq | * |
6.9 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.005 Low
EPSS
Percentile
74.8%
Related for CVE-2007-2412