Lucene search

K
cve[email protected]CVE-2009-0514
HistoryFeb 11, 2009 - 12:30 a.m.

CVE-2009-0514

2009-02-1100:30:02
CWE-22
web.nvd.nist.gov
22
cve
directory traversal
webframe 0.76
remote attackers
arbitrary local files
mod/index.php

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) currentmod and (2) LANG parameters to mod/index.php.

Affected configurations

NVD
Node
webframewebframeMatch0.76
CPENameOperatorVersion
webframe:webframewebframeeq0.76

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

Related for CVE-2009-0514