Lucene search

K
nvd[email protected]NVD:CVE-2009-0735
HistoryFeb 25, 2009 - 8:30 p.m.

CVE-2009-0735

2009-02-2520:30:02
CWE-22
web.nvd.nist.gov

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.8%

Directory traversal vulnerability in lib/classes/message_class.php in Papoo CMS 3.6, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to read and possibly execute arbitrary files via a … (dot dot) in the pfadhier parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
papoopapooMatch3.6

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.8%

Related for NVD:CVE-2009-0735