Lucene search

K
cve[email protected]CVE-2011-4807
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-4807

2022-10-0316:15:14
CWE-22
web.nvd.nist.gov
23
cve
2011
4807
directory traversal
vulnerability
phpalbum
security
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.3%

Directory traversal vulnerability in main.php in phpAlbum 0.4.1.16 and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the var1 parameter.

Affected configurations

NVD
Node
phpalbumphpalbumRange0.4.1.16
OR
phpalbumphpalbumMatch0.2.1
OR
phpalbumphpalbumMatch0.2.2
OR
phpalbumphpalbumMatch0.2.3
OR
phpalbumphpalbumMatch0.2.4
OR
phpalbumphpalbumMatch0.3.0
OR
phpalbumphpalbumMatch0.3.1
OR
phpalbumphpalbumMatch0.3.1fix01
OR
phpalbumphpalbumMatch0.3.1fix02
OR
phpalbumphpalbumMatch0.3.2
OR
phpalbumphpalbumMatch0.4.1-14
OR
phpalbumphpalbumMatch0.4.1-14fix01
OR
phpalbumphpalbumMatch0.4.1-14fix02
OR
phpalbumphpalbumMatch0.4.1-14fix03
OR
phpalbumphpalbumMatch0.4.1-14fix05
OR
phpalbumphpalbumMatch0.4.1-14fix06
OR
phpalbumphpalbumMatch0.4.1.14
OR
phpalbumphpalbumMatch0.4.1.15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.3%

Related for CVE-2011-4807