Lucene search

K
nvd[email protected]NVD:CVE-2007-0335
HistoryJan 18, 2007 - 2:28 a.m.

CVE-2007-0335

2007-01-1802:28:00
web.nvd.nist.gov
4

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.067

Percentile

93.9%

Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the languagepack parameter to (1) jax_petitionbook.php or (2) smileys.php.

Affected configurations

Nvd
Node
jax_scriptsjax_petition_bookMatch1.0.3.06
VendorProductVersionCPE
jax_scriptsjax_petition_book1.0.3.06cpe:2.3:a:jax_scripts:jax_petition_book:1.0.3.06:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.067

Percentile

93.9%

Related for NVD:CVE-2007-0335