CVE-2004-2445

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (dot dot) in the gadget parameter.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html
Exploit
Vendor Advisory
http://securitytracker.com/id?1010651
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/7722
Exploit
http://www.securityfocus.com/bid/10670
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16620
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html
Exploit
Vendor Advisory
http://securitytracker.com/id?1010651
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/7722
Exploit
http://www.securityfocus.com/bid/10670
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/16620

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jaws:jaws:0.3_beta:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10213

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-5x2c-9mff-cvf5

github

почти 4 года назад