CVE-2004-0127

Опубликовано: 03 мар. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.

Ссылки

http://secunia.com/advisories/10753/
http://www.osvdb.org/displayvuln.php?osvdb_id=3768
http://www.securityfocus.com/archive/1/352355
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9529
Exploit
Patch
Vendor Advisory
http://www.securitytracker.com/id?1008892
https://exchange.xforce.ibmcloud.com/vulnerabilities/15129
http://secunia.com/advisories/10753/
http://www.osvdb.org/displayvuln.php?osvdb_id=3768
http://www.securityfocus.com/archive/1/352355
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9529
Exploit
Patch
Vendor Advisory
http://www.securitytracker.com/id?1008892
https://exchange.xforce.ibmcloud.com/vulnerabilities/15129

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*

cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01237

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-xp6r-5ghh-6w2m

github

почти 4 года назад