Lucene search

K
nvd[email protected]NVD:CVE-2007-1138
HistoryMar 02, 2007 - 9:18 p.m.

CVE-2007-1138

2007-03-0221:18:00
CWE-22
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Absolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter.

Affected configurations

NVD
Node
cromosoftsimple_plantilla_phpMatch-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Related for NVD:CVE-2007-1138