Lucene search

[email protected]CVE-2007-4908

HistorySep 17, 2007 - 4:17 p.m.

CVE-2007-4908

2007-09-1716:17:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2007

4908

directory traversal

vulnerability

auracms

remote attackers

arbitrary

local files

parameter

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the pilih parameter.

Affected configurations

NVD

Node

auracmsauracmsMatch1.0

auracmsauracmsMatch1.5

auracmsauracmsMatch1.5_rc

auracmsauracmsMatch1.62

auracmsauracmsMatch2.0

auracmsauracmsMatch2.1

CPENameOperatorVersion
auracms:auracmsauracmseq1.0
auracms:auracmsauracmseq1.5
auracms:auracmsauracmseq1.5_rc
auracms:auracmsauracmseq1.62
auracms:auracmsauracmseq2.0
auracms:auracmsauracmseq2.1

CPE	Name	Operator	Version
auracms:auracms	auracms	eq	1.0
auracms:auracms	auracms	eq	1.5
auracms:auracms	auracms	eq	1.5_rc
auracms:auracms	auracms	eq	1.62
auracms:auracms	auracms	eq	2.0
auracms:auracms	auracms	eq	2.1

References

osvdb.org/40504

secunia.com/advisories/26747

www.auracms.org/?pilih=news&aksi=lihat&id=117

www.securityfocus.com/bid/25619

exchange.xforce.ibmcloud.com/vulnerabilities/36541

www.exploit-db.com/exploits/4390

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Related for CVE-2007-4908

nvd1 cvelist1 prion1