Lucene search

K
cveMitreCVE-2010-1999
HistoryMay 20, 2010 - 5:30 p.m.

CVE-2010-1999

2010-05-2017:30:01
CWE-22
mitre
web.nvd.nist.gov
26
cve-2010-1999
vulnerability
openmairie opencatalogue
directory traversal
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.03

Percentile

90.9%

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069.

Affected configurations

Nvd
Node
openmairieopencatalogueMatch1.024
VendorProductVersionCPE
openmairieopencatalogue1.024cpe:2.3:a:openmairie:opencatalogue:1.024:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.03

Percentile

90.9%