Lucene search

K
cve[email protected]CVE-2009-3534
HistoryOct 02, 2009 - 7:30 p.m.

CVE-2009-3534

2009-10-0219:30:00
CWE-22
web.nvd.nist.gov
22
cve-2009-3534
directory traversal
lionwiki 3.0.3
remote attackers
nvd

6.6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.4%

Directory traversal vulnerability in index.php in LionWiki 3.0.3, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the page parameter.

Affected configurations

NVD
Node
lionwikilionwikiMatch3.0.3
CPENameOperatorVersion
lionwiki:lionwikilionwikieq3.0.3

6.6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.4%

Related for CVE-2009-3534