Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2015-6914
cve-2015-6914
absolute path traversal
sitefactory cms
remote attackers
arbitrary files
security vulnerability
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.5%
Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a full pathname in the file parameter to assets/download.aspx.
Affected configurations
Node
mindbitesitefactory_cmsMatch5.5.9
| CPE | Name | Operator | Version |
|---|---|---|---|
| mindbite:sitefactory_cms | mindbite sitefactory cms | eq | 5.5.9 |
Related
cvelist
cvelist
CVE-2015-6914
2022-10-03 16:15:54
nvd
nvd
CVE-2015-6914
2015-09-11 16:59:20
prion
prion
Path traversal
2015-09-11 16:59:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.5%
Related for CVE-2015-6914