Lucene search

K
cveMitreCVE-2009-4723
HistoryMar 18, 2010 - 6:30 p.m.

CVE-2009-4723

2010-03-1818:30:00
CWE-22
mitre
web.nvd.nist.gov
27
cve
2009
4723
directory traversal
netpet cms
vulnerability
security
nvd
remote attackers
local files

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.009

Percentile

83.1%

Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the language parameter.

Affected configurations

Nvd
Node
netpetnetpet_cmsMatch1.9
VendorProductVersionCPE
netpetnetpet_cms1.9cpe:2.3:a:netpet:netpet_cms:1.9:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.009

Percentile

83.1%

Related for CVE-2009-4723