Lucene search

K
nvd[email protected]NVD:CVE-2007-5454
HistoryOct 14, 2007 - 6:17 p.m.

CVE-2007-5454

2007-10-1418:17:00
CWE-22
web.nvd.nist.gov
1

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.005

Percentile

76.1%

Directory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote attackers to list or create arbitrary directories, or delete arbitrary files, as demonstrated by listing directories via a … (dot dot) in the cam parameter.

Affected configurations

Nvd
Node
php_file_sharing_systemphp_file_sharing_systemMatch1.5.1
VendorProductVersionCPE
php_file_sharing_systemphp_file_sharing_system1.5.1cpe:2.3:a:php_file_sharing_system:php_file_sharing_system:1.5.1:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.005

Percentile

76.1%

Related for NVD:CVE-2007-5454