Lucene search

K
cve[email protected]CVE-2010-4613
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4613

2022-10-0316:21:04
CWE-22
web.nvd.nist.gov
18
cve
directory traversal
hycus cms
remote attackers
arbitrary local files

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.9%

Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the site parameter to (1) index.php and (2) admin.php.

Affected configurations

NVD
Node
hycushycus_cmsMatch1.0.3
CPENameOperatorVersion
hycus:hycus_cmshycus hycus cmseq1.0.3

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.9%

Related for CVE-2010-4613