Lucene search
HistoryOct 02, 2009 - 7:30 p.m.
CVE-2009-3535
cve
2009
3535
directory traversal
vulnerability
clear content 1.1
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
Directory traversal vulnerability in image.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a … (dot dot) in the url parameter. NOTE: the researcher also suggests an analogous PHP remote file inclusion vulnerability, but this may be incorrect.
Affected configurations
Node
allisclearclear_contentMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| allisclear:clear_content | allisclear clear content | eq | 1.1 |
Related
nvd
nvd
CVE-2009-3535
2009-10-02 19:30:00
cvelist
cvelist
CVE-2009-3535
2009-10-02 19:00:00
prion
prion
Directory traversal
2009-10-02 19:30:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2009-3535