Lucene search
HistoryFeb 11, 2015 - 7:59 p.m.
CVE-2015-1577
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.08
Percentile
94.4%
Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (1) … (dot dot) or (2) full pathname in the f parameter.
Affected configurations
Node
yubau5cmsRange≤3.9.3
Related
zeroscience
zeroscience
u5CMS 3.9.3 (deletefile.php) Arbitrary File Deletion Vulnerability
2015-02-09 00:00:00
cvelist
cvelist
CVE-2015-1577
2015-02-11 19:00:00
prion
prion
Directory traversal
2015-02-11 19:59:00
cve
cve
CVE-2015-1577
2015-02-11 19:59:04
exploitdb
exploitdb
u5CMS 3.9.3 - 'deletefile.php' Arbitrary File Deletion
2015-02-09 00:00:00
Achat 0.150 beta7 - Remote Buffer Overflow
2015-02-08 00:00:00
kaspersky
kaspersky
KLA10500 Multiple vulnerabilities in u5CMS
2015-02-11 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.08
Percentile
94.4%
Related for NVD:CVE-2015-1577