CVE-2001-1525

2005-07-1404:00:00

mitre

www.cve.org

directory traversal

easynews 1.5

remote attackers

AI Score

6.7

Confidence

Low

EPSS

0.014

Percentile

86.8%

JSON

Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a “…” in the cid parameter.

References

archives.neohapsis.com/archives/bugtraq/2001-12/0000.html

www.iss.net/security_center/static/7657.php

www.securityfocus.com/bid/3643