Lucene search
HistoryOct 04, 2002 - 4:00 a.m.
CVE-2002-0934
jon hedley
alienform2
directory traversal
remote attackers
arbitrary files
security vulnerability
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
9.4 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.7%
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a … (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.
Affected configurations
Node
jon_hedleyalienform2Match1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| jon_hedley:alienform2 | jon hedley alienform2 | eq | 1.5 |
Related
nvd
nvd
CVE-2002-0934
2002-10-04 04:00:00
CVE-2020-10948
2020-04-01 21:15:13
cvelist
cvelist
CVE-2002-0934
2002-08-31 04:00:00
CVE-2020-10948
2020-04-01 20:11:38
openvas
openvas
AlienForm CGI script
2005-11-03 00:00:00
nessus
nessus
AlienForm2 alienform.cgi Traversal Arbitrary File Manipulation
2002-06-11 00:00:00
cve
cve
CVE-2020-10948
2020-04-01 21:15:13
prion
prion
Design/Logic Flaw
2020-04-01 21:15:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
9.4 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.7%
Related for CVE-2002-0934