Lucene search

K
cve[email protected]CVE-2009-1653
HistoryMay 16, 2009 - 6:30 p.m.

CVE-2009-1653

2009-05-1618:30:00
CWE-22
web.nvd.nist.gov
17
cve
2009
1653
directory traversal
vulnerability
tinybutstrong
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

Directory traversal vulnerability in examples/tbs_us_examples_0view.php in TinyButStrong 3.4.0 allows remote attackers to read arbitrary files via a … (dot dot) in the script parameter.

Affected configurations

NVD
Node
tinybutstrongtinybutstrongMatch3.4.0

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

Related for CVE-2009-1653