Lucene search

K
cve[email protected]CVE-2009-3823
HistoryOct 28, 2009 - 10:30 a.m.

CVE-2009-3823

2009-10-2810:30:00
CWE-22
web.nvd.nist.gov
22
cve-2009-3823
directory traversal
mobilelib gold 3.0
magic_quotes_gpc
remote attackers

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.3%

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote attackers to read arbitrary files via a … (dot dot) in the GLOBALS[page] parameter.

Affected configurations

NVD
Node
ac4pmobilelib_goldMatch3.0

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.3%

Related for CVE-2009-3823