Lucene search
MitreCVE-2009-2925HistoryAug 21, 2009 - 11:30 a.m.
CVE-2009-2925
2009-08-2111:30:00
CWE-22
mitre
web.nvd.nist.gov
28
cve
2009
2925
directory traversal
djcalendar
cgi
djcalendar
nvd
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.008
Percentile
82.0%
Directory traversal vulnerability in DJcalendar.cgi in DJCalendar allows remote attackers to read arbitrary files via a … (dot dot) in the TEMPLATE parameter.
Affected configurations
Node
djcalendardjcalendarMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| djcalendar | djcalendar | - | cpe:2.3:a:djcalendar:djcalendar:-:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
DJ Calendar - 'DJcalendar.cgi TEMPLATE' File Disclosure
2009-07-14 00:00:00
prion
prion
Directory traversal
2009-08-21 11:30:00
nvd
nvd
CVE-2009-2925
2009-08-21 11:30:00
cvelist
cvelist
CVE-2009-2925
2009-08-21 10:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.008
Percentile
82.0%
Related for CVE-2009-2925