Lucene search
HistoryOct 03, 2022 - 4:23 p.m.
CVE-2009-3538
cve-2009-3538
directory traversal
remote attack
clear content 1.1
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a … (dot dot) in the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
Node
allisclearclear_contentMatch1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| allisclear:clear_content | allisclear clear content | eq | 1.1 |
Related
prion
prion
Directory traversal
2009-10-02 19:30:00
nvd
nvd
CVE-2009-3538
2009-10-02 19:30:00
cvelist
cvelist
CVE-2009-3538
2022-10-03 16:23:56
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Related for CVE-2009-3538