Lucene search

K
cve[email protected]CVE-2007-4655
HistorySep 04, 2007 - 10:17 p.m.

CVE-2007-4655

2007-09-0422:17:00
CWE-200
CWE-22
web.nvd.nist.gov
23
cve-2007-4655
directory traversal
cgi rescue
shopping basket professional
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.0%

Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi.

Affected configurations

NVD
Node
cgi-rescueshopping_basket_professionalRange7.51

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.0%

Related for CVE-2007-4655