Lucene search
HistoryJun 18, 2009 - 9:30 p.m.
CVE-2009-2110
cve-2009-2110
directory traversal
db top sites 1.0
security vulnerability
nvd
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.5%
Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the u parameter to (1) full.php, (2) index.php, and (3) contact.php.
Affected configurations
Node
jnmsolutionsdb_top_sitesMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| jnmsolutions:db_top_sites | jnmsolutions db top sites | eq | 1.0 |
Related
prion
prion
Directory traversal
2009-06-18 21:30:00
nvd
nvd
CVE-2009-2110
2009-06-18 21:30:00
cvelist
cvelist
CVE-2009-2110
2009-06-18 21:00:00
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.5%
Related for CVE-2009-2110