Lucene search
HistoryJan 09, 2009 - 6:30 p.m.
CVE-2009-0113
cve-2009-0113
directory traversal
xstandard
joomla
vulnerability
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers to list arbitrary directories via a … (dot dot) in the X_CMS_LIBRARY_PATH HTTP header.
Affected configurations
Node
joomlaxstandard
joomlajoomlaRange≤1.5.8
ORjoomlajoomlaMatch1.0
ORjoomlajoomlaMatch1.0.0
ORjoomlajoomlaMatch1.0.1
ORjoomlajoomlaMatch1.0.2
ORjoomlajoomlaMatch1.0.3
ORjoomlajoomlaMatch1.0.4
ORjoomlajoomlaMatch1.0.5
ORjoomlajoomlaMatch1.0.6
ORjoomlajoomlaMatch1.0.7
ORjoomlajoomlaMatch1.0.8
ORjoomlajoomlaMatch1.0.9
ORjoomlajoomlaMatch1.0.10
ORjoomlajoomlaMatch1.0.11
ORjoomlajoomlaMatch1.0.12
ORjoomlajoomlaMatch1.0.13
ORjoomlajoomlaMatch1.0.14
ORjoomlajoomlaMatch1.03
ORjoomlajoomlaMatch1.5
ORjoomlajoomlaMatch1.5.0beta
ORjoomlajoomlaMatch1.5.0beta1
ORjoomlajoomlaMatch1.5.0beta2
ORjoomlajoomlaMatch1.5.0rc1
ORjoomlajoomlaMatch1.5.1
ORjoomlajoomlaMatch1.5.2
ORjoomlajoomlaMatch1.5.3
ORjoomlajoomlaMatch1.5.4
ORjoomlajoomlaMatch1.5.5
ORjoomlajoomlaMatch1.5.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| joomla:xstandard | joomla xstandard | eq | * |
Related
nessus
nessus
checkpoint_advisories
checkpoint_advisories
prion
prion
Directory traversal
2009-01-09 18:30:00
cvelist
cvelist
CVE-2009-0113
2009-01-09 18:00:00
nvd
nvd
CVE-2009-0113
2009-01-09 18:30:03
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2009-0113