Lucene search
HistoryMay 01, 2015 - 10:59 a.m.
CVE-2015-0912
easyctf
cve-2015-0912
nvd
file write
remote code execution
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.9%
EasyCTF before 1.4 allows remote authenticated users to write executable content to files via unspecified vectors.
Affected configurations
Node
kozoseasyctfRange≤1.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| kozos:easyctf | kozos easyctf | le | 1.3 |
Related
jvn
jvn
JVN#67520407: EasyCTF vulnerable to arbitrary file creation
2015-05-01 00:00:00
cvelist
cvelist
CVE-2015-0912
2015-05-01 10:00:00
prion
prion
Code injection
2015-05-01 10:59:00
nvd
nvd
CVE-2015-0912
2015-05-01 10:59:02
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.9%
Related for CVE-2015-0912