Lucene search
HistoryDec 28, 2009 - 7:00 p.m.
CVE-2009-4426
ignition 1.2
directory traversal
remote attackers
arbitrary local files
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%
Multiple directory traversal vulnerabilities in Ignition 1.2, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the blog parameter to (1) comment.php and (2) view.php.
Affected configurations
Node
launchpadignitionMatch1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| launchpad:ignition | launchpad ignition | eq | 1.2 |
Related
nvd
nvd
CVE-2009-4426
2009-12-28 19:00:00
prion
prion
Directory traversal
2009-12-28 19:00:00
cvelist
cvelist
CVE-2009-4426
2009-12-28 18:27:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.0%
Related for CVE-2009-4426