Lucene search

K
cveMitreCVE-2010-2313
HistoryJun 17, 2010 - 4:30 p.m.

CVE-2010-2313

2010-06-1716:30:02
CWE-22
mitre
web.nvd.nist.gov
26
security
vulnerability
directory traversal
anodyne productions
simm management system
sms

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.051

Percentile

93.0%

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
anodyne-productionssimm_management_systemMatch2.6.10
VendorProductVersionCPE
anodyne-productionssimm_management_system2.6.10cpe:2.3:a:anodyne-productions:simm_management_system:2.6.10:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.051

Percentile

93.0%

Related for CVE-2010-2313