Lucene search
MitreCVE-2009-0448HistoryFeb 10, 2009 - 7:00 a.m.
CVE-2009-0448
2009-02-1007:00:23
CWE-22
mitre
web.nvd.nist.gov
26
cve
2009
0448
directory traversal
admin
modules
preview.php
syntax desktop 2.7
vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.011
Percentile
84.6%
Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the synTarget parameter.
Affected configurations
Node
syntax_desktopsyntax_desktopMatch2.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| syntax_desktop | syntax_desktop | 2.7 | cpe:/a:syntax_desktop:syntax_desktop:2.7::: |
Related
openvas
openvas
Syntax Desktop Directory Traversal Vulnerability
2009-02-20 00:00:00
nvd
nvd
CVE-2009-0448
2009-02-10 07:00:23
prion
prion
Directory traversal
2009-02-10 07:00:00
cvelist
cvelist
CVE-2009-0448
2009-02-05 20:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.011
Percentile
84.6%
Related for CVE-2009-0448