Lucene search

MitreCVE-2010-2336

HistoryJun 18, 2010 - 8:30 p.m.

CVE-2010-2336

2010-06-1820:30:01

CWE-200

mitre

web.nvd.nist.gov

cve-2010-2336

yamamah photo gallery

web security

source code retrieval

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.004

Percentile

73.8%

JSON

index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter.

Affected configurations

Nvd

Node

yamamahyamamahMatch1.00

VendorProductVersionCPE
yamamahyamamah1.00cpe:2.3:a:yamamah:yamamah:1.00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
yamamah	yamamah	1.00	cpe:2.3:a:yamamah:yamamah:1.00:::::::*

References

www.exploit-db.com/exploits/13845

www.yamamah.org/home/?page=39

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.004

Percentile

73.8%

JSON

Related for CVE-2010-2336