Lucene search

K
jvnJapan Vulnerability NotesJVN:73261710
HistoryFeb 17, 2015 - 12:00 a.m.

JVN#73261710: C-BOARD Moyuku vulnerable to arbitrary file creation

2015-02-1700:00:00
Japan Vulnerability Notes
jvn.jp
19

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.019

Percentile

88.5%

C-BOARD Moyuku is a bulletin board software. C-BOARD Moyuku contains a vulnerability that may allow a remote attacker to create arbitrary files.

Impact

A remote attacker creating arbitrary files may result in arbitrary code execution on the server.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

  • C-BOARD Moyuku v1.03b2 and earlier

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.019

Percentile

88.5%

Related for JVN:73261710