Lucene search

K
cve[email protected]CVE-2007-1140
HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1140

2007-03-0221:18:00
CWE-22
web.nvd.nist.gov
23
cve-2007-1140
directory traversal
remote attackers
file modification
vulnerability
information security

9.4 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:C/A:N

6.7 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.9%

Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a … (dot dot) in the filename parameter.

Affected configurations

NVD
Node
barekonceptpheapMatch-
CPENameOperatorVersion
barekoncept:pheapbarekoncept pheapeq-

9.4 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:C/A:N

6.7 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.9%

Related for CVE-2007-1140