Lucene search

K
cveMitreCVE-2004-1601
HistoryFeb 20, 2005 - 5:00 a.m.

CVE-2004-1601

2005-02-2005:00:00
mitre
web.nvd.nist.gov
25
cve-2004-1601
coolphp
directory traversal
remote attackers
arbitrary files
local php scripts

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.026

Percentile

90.6%

Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a … (dot dot) in the op parameter.

Affected configurations

Nvd
Node
coolphpcoolphp_web_portalMatch1.0_stable
VendorProductVersionCPE
coolphpcoolphp_web_portal1.0_stablecpe:2.3:a:coolphp:coolphp_web_portal:1.0_stable:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.026

Percentile

90.6%

Related for CVE-2004-1601