Lucene search

[email protected]CVE-2009-2222

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-2222

2022-10-0316:24:05

CWE-22

[email protected]

web.nvd.nist.gov

cve-2009-2222

php-i-board

directory traversal

vulnerability

remote attack

arbitrary files

mail

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.7%

JSON

Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail.

Affected configurations

NVD

Node

php.s3php-i-boardRange≤1.2

php.s3php-i-boardMatch1.0

php.s3php-i-boardMatch1.1

CPENameOperatorVersion
php.s3:php-i-boardphp.s3 php-i-boardle1.2
php.s3:php-i-boardphp.s3 php-i-boardeq1.0
php.s3:php-i-boardphp.s3 php-i-boardeq1.1

CPE	Name	Operator	Version
php.s3:php-i-board	php.s3 php-i-board	le	1.2
php.s3:php-i-board	php.s3 php-i-board	eq	1.0
php.s3:php-i-board	php.s3 php-i-board	eq	1.1

References

jvn.jp/jp/JVN32788272/index.html

jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html

php.s3.to/bbs/bbs8.php

secunia.com/advisories/35532

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.7%

JSON

Related for CVE-2009-2222

nvd1 prion1 cvelist1 jvn1