Lucene search
HistoryOct 12, 2007 - 11:17 p.m.
CVE-2007-5431
cve-2007-5431
ftp
sensitive information exposure
myftpuploader
stride 1.0
security vulnerability
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.9%
include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code.
Affected configurations
Node
javaatworkmyftpuploader_module
ORscottmanktelowstrideMatch1.0
Related
cvelist
cvelist
CVE-2007-5431
2007-10-12 23:00:00
prion
prion
Code injection
2007-10-12 23:17:00
nvd
nvd
CVE-2007-5431
2007-10-12 23:17:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.9%
Related for CVE-2007-5431