Lucene search
HistoryFeb 24, 2009 - 6:30 p.m.
CVE-2009-0722
cve
2009
0722
directory traversal
vulnerability
potato news 1.0.0
remote attack
arbitrary files
user cookie parameter
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.7%
Directory traversal vulnerability in admin.php in Potato News 1.0.0 allows remote attackers to include and execute arbitrary files via a … (dot dot) in the user cookie parameter.
Affected configurations
Node
potato-scriptspotato_newsMatch1.0.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| potato-scripts:potato_news | potato-scripts potato news | eq | 1.0.0 |
Related
cvelist
cvelist
CVE-2009-0722
2009-02-24 18:00:00
prion
prion
Directory traversal
2009-02-24 18:30:00
nvd
nvd
CVE-2009-0722
2009-02-24 18:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.7%
Related for CVE-2009-0722