Lucene search

K
cve[email protected]CVE-2009-0731
HistoryFeb 24, 2009 - 11:30 p.m.

CVE-2009-0731

2009-02-2423:30:03
CWE-22
web.nvd.nist.gov
19
cve
2009
0731
directory traversal
free arcade script 1.0
vulnerability
remote attackers
arbitrary local files

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the template parameter.

Affected configurations

NVD
Node
freearcadescriptfree_arcade_scriptMatch1.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

Related for CVE-2009-0731