Lucene search

K
nvd[email protected]NVD:CVE-2009-3318
HistorySep 23, 2009 - 12:08 p.m.

CVE-2009-3318

2009-09-2312:08:35
CWE-22
web.nvd.nist.gov
5

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.011

Percentile

84.2%

Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a … (dot dot) in the target parameter to index.php.

Affected configurations

Nvd
Node
joomlajoomla
AND
breedveldcom_albumMatch1.14
VendorProductVersionCPE
joomlajoomla*cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*
breedveldcom_album1.14cpe:2.3:a:breedveld:com_album:1.14:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.011

Percentile

84.2%

Related for NVD:CVE-2009-3318