Lucene search
HistoryJun 23, 2009 - 9:30 p.m.
CVE-2009-2177
cve
2009
2177
fuzzylime
cms
directory traversal
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.8%
code/display.php in fuzzylime (cms) 3.03a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to conduct directory traversal attacks and overwrite arbitrary files via a “…//” (dot dot) in the s parameter, which is collapsed into a “…/” value.
Affected configurations
Node
fuzzylimefuzzylime_cmsMatch3.03a
| CPE | Name | Operator | Version |
|---|---|---|---|
| fuzzylime:fuzzylime_cms | fuzzylime fuzzylime cms | eq | 3.03a |
Related
cvelist
cvelist
CVE-2009-2177
2009-06-23 21:21:00
prion
prion
Directory traversal
2009-06-23 21:30:00
nvd
nvd
CVE-2009-2177
2009-06-23 21:30:00
openvas
openvas
Fuzyylime(cms) RCE Vulnerability
2009-06-30 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.8%
Related for CVE-2009-2177