Lucene search

K
nvd[email protected]NVD:CVE-2011-3837
HistoryDec 24, 2011 - 7:55 p.m.

CVE-2011-3837

2011-12-2419:55:03
CWE-22
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.3%

Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a … (dot dot) in the preview parameter to index.php.

Affected configurations

NVD
Node
wuzlywuzlyMatch2.0

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.3%

Related for NVD:CVE-2011-3837