Lucene search

K
cveMitreCVE-2010-1537
HistoryApr 26, 2010 - 7:30 p.m.

CVE-2010-1537

2010-04-2619:30:00
CWE-22
mitre
web.nvd.nist.gov
83
cve-2010-1537
directory traversal
vulnerability
phpcdb 1.0
remote code execution

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.009

Percentile

82.6%

Multiple directory traversal vulnerabilities in phpCDB 1.0 and earlier allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the lang_global parameter to (1) firstvisit.php, (2) newfolder.php, (3) showfolders.php, (4) newlang.php, (5) showinnerfolder.php, (6) writecode.php, and (7) showcode.php.

Affected configurations

Nvd
Node
francois_bissonnettephpcdbRange1.0
VendorProductVersionCPE
francois_bissonnettephpcdb*cpe:2.3:a:francois_bissonnette:phpcdb:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.009

Percentile

82.6%

Related for CVE-2010-1537