Lucene search
HistoryOct 28, 2009 - 10:30 a.m.
CVE-2009-3824
cve-2009-3824
directory traversal
greenwood php content manager
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.7%
Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the content_path parameter.
Affected configurations
Node
michael_j_greenwoodphp_content_managerMatch0.3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| michael_j_greenwood:php_content_manager | michael j greenwood php content manager | eq | 0.3.2 |
Related
nvd
nvd
CVE-2009-3824
2009-10-28 10:30:00
prion
prion
Directory traversal
2009-10-28 10:30:00
cvelist
cvelist
CVE-2009-3824
2009-10-28 10:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.7%
Related for CVE-2009-3824