Lucene search

PRIOn knowledge basePRION:CVE-2007-1449

HistoryMar 14, 2007 - 6:19 p.m.

Directory traversal

2007-03-1418:19:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.8%

JSON

Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a … (dot dot) in the lang parameter.

CPENameOperatorVersion
php-nukeeq7.3
php-nukeeq7.4
php-nukeeq7.1
php-nukeeq7.9
php-nukeeq8.0
php-nukeeq8.0.0 final
php-nukeeq7.5
php-nukeeq7.2
php-nukeeq7.7
php-nukeeq7.8

Name	Operator	Version
php-nuke	eq	7.3
php-nuke	eq	7.4
php-nuke	eq	7.1
php-nuke	eq	7.9
php-nuke	eq	8.0
php-nuke	eq	8.0.0 final
php-nuke	eq	7.5
php-nuke	eq	7.2
php-nuke	eq	7.7
php-nuke	eq	7.8

Rows per page:

1-10 of 121

References

secunia.com/advisories/24484

www.securityfocus.com/archive/1/462443/100/0/threaded

www.securityfocus.com/archive/1/462588/100/0/threaded

www.securityfocus.com/bid/22909

7.1 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.8%

JSON

Related for PRION:CVE-2007-1449