Lucene search
HistoryMay 22, 2009 - 11:52 a.m.
CVE-2009-1748
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.009
Percentile
82.8%
Multiple directory traversal vulnerabilities in index.php in Catviz 0.4.0 Beta 1 allow remote attackers to read arbitrary files via a … (dot dot) in the (1) webpages_form or (2) userman_form parameter.
Affected configurations
Node
joost_horwardcatvizMatch0.4.0beta_1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joost_horward | catviz | 0.4.0 | cpe:2.3:a:joost_horward:catviz:0.4.0:beta_1:*:*:*:*:*:* |
Related
prion
prion
Directory traversal
2009-05-22 11:52:00
cvelist
cvelist
CVE-2009-1748
2009-05-21 18:00:00
cve
cve
CVE-2009-1748
2009-05-22 11:52:38
exploitdb
exploitdb
Catviz 0.4.0 beta1 - Local File Inclusion / Cross-Site Scripting
2009-05-20 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.009
Percentile
82.8%
Related for NVD:CVE-2009-1748