Lucene search

K
cveMitreCVE-2007-6290
HistoryDec 10, 2007 - 6:46 p.m.

CVE-2007-6290

2007-12-1018:46:00
CWE-22
mitre
web.nvd.nist.gov
24
cve-2007-6290
directory traversal
remote attack
serweb 2.0.0
security vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

70.9%

Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to read arbitrary files via a … (dot dot) in the (1) mod and (2) js parameters.

Affected configurations

Nvd
Node
iptelserwebMatch2.0.0dev1
VendorProductVersionCPE
iptelserweb2.0.0dev1cpe:2.3:a:iptel:serweb:2.0.0dev1:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

70.9%

Related for CVE-2007-6290