Lucene search
HistoryJul 13, 2009 - 5:30 p.m.
CVE-2009-2449
cve
2009
2449
directory traversal
vulnerability
adbnewssender
mailing list
admin
change config
php
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.1%
Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the path_to_lang parameter.
Affected configurations
Node
adbnewssenderadbnewssenderRange≤1.5.5
ORadbnewssenderadbnewssenderMatch1.0
ORadbnewssenderadbnewssenderMatch1.1
ORadbnewssenderadbnewssenderMatch1.1.1
ORadbnewssenderadbnewssenderMatch1.1.2
ORadbnewssenderadbnewssenderMatch1.2.0
ORadbnewssenderadbnewssenderMatch1.2.1
ORadbnewssenderadbnewssenderMatch1.2.2
ORadbnewssenderadbnewssenderMatch1.2.3
ORadbnewssenderadbnewssenderMatch1.2.4
ORadbnewssenderadbnewssenderMatch1.3.0
ORadbnewssenderadbnewssenderMatch1.3.1
ORadbnewssenderadbnewssenderMatch1.3.2
ORadbnewssenderadbnewssenderMatch1.3.3
ORadbnewssenderadbnewssenderMatch1.4.0
ORadbnewssenderadbnewssenderMatch1.4.1
ORadbnewssenderadbnewssenderMatch1.4.2
ORadbnewssenderadbnewssenderMatch1.4.3
ORadbnewssenderadbnewssenderMatch1.4.4
ORadbnewssenderadbnewssenderMatch1.4.5
ORadbnewssenderadbnewssenderMatch1.4.6
ORadbnewssenderadbnewssenderMatch1.4.7
ORadbnewssenderadbnewssenderMatch1.4.8
ORadbnewssenderadbnewssenderMatch1.4.9
ORadbnewssenderadbnewssenderMatch1.4.10
ORadbnewssenderadbnewssenderMatch1.4.11
ORadbnewssenderadbnewssenderMatch1.5.0
ORadbnewssenderadbnewssenderMatch1.5.1
ORadbnewssenderadbnewssenderMatch1.5.2
Related
prion
prion
Directory traversal
2009-07-13 17:30:00
cvelist
cvelist
CVE-2009-2449
2009-07-13 17:00:00
nvd
nvd
CVE-2009-2449
2009-07-13 17:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
75.1%
Related for CVE-2009-2449