Lucene search

K
cveMitreCVE-2007-3272
HistoryJun 19, 2007 - 9:30 p.m.

CVE-2007-3272

2007-06-1921:30:00
mitre
web.nvd.nist.gov
43
cve
2007
3272
directory traversal
minibb
index.php
vulnerability
remote attackers
register action
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.02

Percentile

88.9%

Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a … (dot dot) in the language parameter in a register action.

Affected configurations

Nvd
Node
minibbminibbMatch2.0.5
VendorProductVersionCPE
minibbminibb2.0.5cpe:2.3:a:minibb:minibb:2.0.5:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.02

Percentile

88.9%

Related for CVE-2007-3272