Lucene search
HistoryJan 08, 2008 - 7:46 p.m.
CVE-2008-0140
cve-2008-0140
directory traversal
uebimiau webmail
remote authenticated users
arbitrary file read
6.4 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.005 Low
EPSS
Percentile
75.2%
Directory traversal vulnerability in error.php in Uebimiau Webmail 2.7.10 and 2.7.2 allows remote authenticated users to read arbitrary files via a … (dot dot) in the selected_theme parameter, a different vector than CVE-2007-3172.
| CPE | Name | Operator | Version |
|---|---|---|---|
| uebimiau:webmail | uebimiau webmail | eq | 2.7.10 |
| uebimiau:webmail | uebimiau webmail | eq | 2.7.2 |
Related
prion
prion
Directory traversal
2008-01-08 19:46:00
Directory traversal
2008-01-10 00:46:00
Directory traversal
2007-06-11 22:30:00
cve
cve
CVE-2008-0210
2008-01-10 00:46:00
CVE-2007-3172
2007-06-11 22:30:00
nessus
nessus
UebiMiau Multiple Input Validation Vulnerabilities
2007-05-30 00:00:00
6.4 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.005 Low
EPSS
Percentile
75.2%
Related for CVE-2008-0140