Lucene search
HistoryAug 21, 2009 - 11:30 a.m.
CVE-2009-2925
cve
2009
2925
directory traversal
djcalendar
cgi
djcalendar
nvd
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a … (dot dot) in the TEMPLATE parameter.
Affected configurations
Node
djcalendardjcalendarMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| djcalendar:djcalendar | djcalendar | eq | - |
Related
prion
prion
Directory traversal
2009-08-21 11:30:00
nvd
nvd
CVE-2009-2925
2009-08-21 11:30:00
cvelist
cvelist
CVE-2009-2925
2009-08-21 10:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.0%
Related for CVE-2009-2925