Lucene search

PRIOn knowledge basePRION:CVE-2007-2960

HistoryMay 31, 2007 - 11:30 p.m.

Directory traversal

2007-05-3123:30:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.1%

JSON

Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the skin_name parameter to template.php in (1) skin/dark/, (2) skin/gold/, or (3) skin/original/, a different vector than CVE-2007-2900. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
scallywageq2005425.0.0

CPE	Name	Operator	Version
	scallywag	eq	2005425.0.0

References

osvdb.org/38039

osvdb.org/38040

osvdb.org/38041

www.vupen.com/english/advisories/2007/1933

exchange.xforce.ibmcloud.com/vulnerabilities/34469

7.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.1%

JSON

Related for PRION:CVE-2007-2960