Lucene search

[email protected]CVE-2007-4957

HistorySep 18, 2007 - 8:17 p.m.

CVE-2007-4957

2007-09-1820:17:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2007

4957

directory traversal

chupix cms

vulnerability

remote attackers

arbitrary files

arbitrary directories

nvd

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%

JSON

Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a … (dot dot) in the (1) fichier or (2) repertoire parameter, or create arbitrary directories via a … (dot dot) in the (3) repertoire parameter.

CPENameOperatorVersion
chupix:chupix_cmschupix chupix cmseq0.2.3

CPE	Name	Operator	Version
chupix:chupix_cms	chupix chupix cms	eq	0.2.3

References

osvdb.org/38881

osvdb.org/38882

secunia.com/advisories/26851

www.securityfocus.com/bid/25681

www.vupen.com/english/advisories/2007/3180

exchange.xforce.ibmcloud.com/vulnerabilities/36641

www.exploit-db.com/exploits/4411

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%

JSON

Related for CVE-2007-4957

prion1