Lucene search

K
cve[email protected]CVE-2011-5077
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5077

2022-10-0316:15:12
web.nvd.nist.gov
21
cve-2011-5077
hdwiki
file upload vulnerability
remote code execution
security vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.1%

Unrestricted file upload vulnerability in attachement.php in HDWiki 5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in image directory.

Affected configurations

NVD
Node
hudonghdwikiMatch5.0
CPENameOperatorVersion
hudong:hdwikihudong hdwikieq5.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.1%

Related for CVE-2011-5077