Lucene search
HistoryOct 01, 2009 - 2:30 p.m.
CVE-2009-3507
cve-2009-3507
directory traversal
modules.php
cmsphp 0.21
remote attack
local file inclusion
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.0%
Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the mod_file parameter.
Affected configurations
Node
jean-michel_wyttenbachcmsphpMatch0.21
| CPE | Name | Operator | Version |
|---|---|---|---|
| jean-michel_wyttenbach:cmsphp | jean-michel wyttenbach cmsphp | eq | 0.21 |
Related
prion
prion
Directory traversal
2009-10-01 14:30:00
cvelist
cvelist
CVE-2009-3507
2009-10-01 14:00:00
nvd
nvd
CVE-2009-3507
2009-10-01 14:30:01
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.0%
Related for CVE-2009-3507