CVE-2005-0479

Опубликовано: 30 мар. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and (1) "/" slash), (2) "" (backslash), or (3) hex-encoded characters in the fn parameter.

Ссылки

http://www.securityfocus.com/archive/1/390918
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/12592
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19414
http://www.securityfocus.com/archive/1/390918
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/12592
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19414

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:trackercam:trackercam:*:*:*:*:*:*:*:*

Версия до 5.12 (включая)

EPSS

Процентиль: 87%

0.03447

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cpmx-pqmx-cfmg

github

почти 4 года назад

Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and (1) "/" slash), (2) "\" (backslash), or (3) hex-encoded characters in the fn parameter.