Lucene search
HistoryJan 29, 2009 - 6:30 p.m.
CVE-2009-0340
cve
2009
0340
directory traversal
vulnerabilities
simple php newsletter
remote attackers
arbitrary files
mail.php
mailbar.php
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a … (dot dot) in the olang parameter to (1) mail.php and (2) mailbar.php.
Affected configurations
Node
quirmsimple_php_newsletterMatch1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| quirm:simple_php_newsletter | quirm simple php newsletter | eq | 1.5 |
Related
nvd
nvd
CVE-2009-0340
2009-01-29 18:30:02
prion
prion
Directory traversal
2009-01-29 18:30:00
cvelist
cvelist
CVE-2009-0340
2009-01-29 18:09:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.7%
Related for CVE-2009-0340