Lucene search
MitreCVE-2009-2176HistoryJun 23, 2009 - 9:30 p.m.
CVE-2009-2176
2009-06-2321:30:00
CWE-22
mitre
web.nvd.nist.gov
24
cve
directory traversal
fuzzylime
cms
vulnerability
remote attack
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.008
Percentile
81.4%
Multiple directory traversal vulnerabilities in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the (1) list parameter to code/confirm.php and the (2) template parameter to code/display.php.
Affected configurations
Node
fuzzylimefuzzylime_cmsMatch3.03a
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fuzzylime | fuzzylime_cms | 3.03a | cpe:2.3:a:fuzzylime:fuzzylime_cms:3.03a:*:*:*:*:*:*:* |
Related
prion
prion
Directory traversal
2009-06-23 21:30:00
cvelist
cvelist
CVE-2009-2176
2009-06-23 21:21:00
nvd
nvd
CVE-2009-2176
2009-06-23 21:30:00
exploitdb
exploitdb
Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption
2009-06-17 00:00:00
openvas
openvas
Fuzyylime(cms) RCE Vulnerability
2009-06-30 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.008
Percentile
81.4%
Related for CVE-2009-2176