Lucene search

K
cve[email protected]CVE-2007-6185
HistoryNov 30, 2007 - 12:46 a.m.

CVE-2007-6185

2007-11-3000:46:00
CWE-22
web.nvd.nist.gov
22
cve
2007
6185
directory traversal
eurologon cms
vulnerability
nvd

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.048 Low

EPSS

Percentile

92.6%

Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files via a … (dot dot) in the file parameter in a download action, as demonstrated by a certain PHP file containing database credentials.

7.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.048 Low

EPSS

Percentile

92.6%

Related for CVE-2007-6185