Lucene search
HistoryFeb 18, 2009 - 11:30 p.m.
CVE-2009-0645
cve-2009-0645
nvd
jaws 0.8.8
directory traversal
index.php
remote authentication
6.2 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.2%
Directory traversal vulnerability in index.php in Jaws 0.8.8 allows remote authenticated users to read arbitrary files via a … (dot dot) in the (1) language, (2) Introduction_complete, and (3) use_log parameters, different vectors than CVE-2004-2445.
Related
prion
prion
Directory traversal
2009-02-18 23:30:00
nessus
nessus
Jaws language Parameter Multiple Local File Includes
2009-02-06 00:00:00
JAWS index.php gadget Parameter Traversal Arbitrary File Access
2005-01-18 00:00:00
openvas
openvas
Jaws CMS Directory Traversal Vulnerability
2009-02-26 00:00:00
cve
cve
CVE-2004-2445
2004-12-31 05:00:00
6.2 Medium
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.2%
Related for CVE-2009-0645