Lucene search
HistoryFeb 11, 2015 - 7:59 p.m.
CVE-2015-1577
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.4%
Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) … (dot dot) or (2) full pathname in the f parameter.
Affected configurations
Node
yubau5cmsRange≤3.9.3
Related
zeroscience
zeroscience
u5CMS 3.9.3 (deletefile.php) Arbitrary File Deletion Vulnerability
2015-02-09 00:00:00
prion
prion
Directory traversal
2015-02-11 19:59:00
cve
cve
CVE-2015-1577
2022-10-03 16:15:51
cvelist
cvelist
CVE-2015-1577
2022-10-03 16:15:51
kaspersky
kaspersky
KLA10500 Multiple vulnerabilities in u5CMS
2015-02-11 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.4%
Related for NVD:CVE-2015-1577