Lucene search

K
nvd[email protected]NVD:CVE-2007-3936
HistoryJul 21, 2007 - 12:30 a.m.

CVE-2007-3936

2007-07-2100:30:00
CWE-22
web.nvd.nist.gov
4

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

75.5%

Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter.

Affected configurations

Nvd
Node
a-shopa-shopRange0.70
OR
a-shopa-shopRange0.71
VendorProductVersionCPE
a-shopa-shop*cpe:2.3:a:a-shop:a-shop:*:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.005

Percentile

75.5%

Related for NVD:CVE-2007-3936