Lucene search

[email protected]CVE-2009-1768

HistoryMay 22, 2009 - 6:30 p.m.

CVE-2009-1768

2009-05-2218:30:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2009

1768

directory traversal

rama zaiten cms

vulnerability

security

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

JSON

Directory traversal vulnerability in download.php in Rama Zaiten CMS 0.9.8 and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the file parameter.

Affected configurations

NVD

Node

ramazeitenramazaitencms0.9.7.5

ramazeitenramazaitencms0.9.7.6

ramazeitenramazaitencms0.9.7.8

ramazeitenramazaitencms0.9.8

CPENameOperatorVersion
ramazeiten:ramazaitencms0.9.7.5ramazeiten ramazaitencms0.9.7.5eq*
ramazeiten:ramazaitencms0.9.7.6ramazeiten ramazaitencms0.9.7.6eq*
ramazeiten:ramazaitencms0.9.7.8ramazeiten ramazaitencms0.9.7.8eq*
ramazeiten:ramazaitencms0.9.8ramazeiten ramazaitencms0.9.8eq*

CPE	Name	Operator	Version
ramazeiten:ramazaitencms0.9.7.5	ramazeiten ramazaitencms0.9.7.5	eq	*
ramazeiten:ramazaitencms0.9.7.6	ramazeiten ramazaitencms0.9.7.6	eq	*
ramazeiten:ramazaitencms0.9.7.8	ramazeiten ramazaitencms0.9.7.8	eq	*
ramazeiten:ramazaitencms0.9.8	ramazeiten ramazaitencms0.9.8	eq	*

References

osvdb.org/54546

secunia.com/advisories/35116

www.securityfocus.com/bid/34995

www.vupen.com/english/advisories/2009/1343

exchange.xforce.ibmcloud.com/vulnerabilities/50572

www.exploit-db.com/exploits/8700

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.031 Low

EPSS

Percentile

91.1%

JSON

Related for CVE-2009-1768

prion1 cvelist1 nvd1