Lucene search

[email protected]CVE-2015-0877

HistoryApr 06, 2015 - 1:59 a.m.

CVE-2015-0877

2015-04-0601:59:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2015-0877

unrestricted file upload

vulnerability

c-board moyuku

code execution

remote attack

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.4%

JSON

Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code by uploading a file with a \0 character in its name.

CPENameOperatorVersion
c-board_moyuku_project:c-board_moyukuc-board moyuku project c-board moyukueq1.01
c-board_moyuku_project:c-board_moyukuc-board moyuku project c-board moyukueq1.02
c-board_moyuku_project:c-board_moyukuc-board moyuku project c-board moyukule1.03

CPE	Name	Operator	Version
c-board_moyuku_project:c-board_moyuku	c-board moyuku project c-board moyuku	eq	1.01
c-board_moyuku_project:c-board_moyuku	c-board moyuku project c-board moyuku	eq	1.02
c-board_moyuku_project:c-board_moyuku	c-board moyuku project c-board moyuku	le	1.03

References

jvn.jp/en/jp/JVN73261710/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000018

sourceforge.jp/projects/cb-moyuku/news/

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.4%

JSON

Related for CVE-2015-0877

jvn1 cvelist1 prion1