Lucene search

K
cve[email protected]CVE-2007-6184
HistoryNov 30, 2007 - 12:46 a.m.

CVE-2007-6184

2007-11-3000:46:00
CWE-22
web.nvd.nist.gov
24
cve-2007-6184
directory traversal
security vulnerability
project alumni 1.0.9
remote attack
arbitrary local files
nvd

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.036 Low

EPSS

Percentile

91.6%

Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the act parameter.

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.036 Low

EPSS

Percentile

91.6%

Related for CVE-2007-6184