CVE-2005-1090

Опубликовано: 02 мая 2005

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Directory traversal vulnerability in the readFile and writeFile API for Maxthon 1.2.0 and 1.2.1 allows remote attackers to read or write arbitrary files.

Ссылки

http://secunia.com/advisories/14918
Patch
Vendor Advisory
http://www.osvdb.org/15423
http://www.raffon.net/advisories/maxthon/multvulns.html
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/13074
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/20033
http://secunia.com/advisories/14918
Patch
Vendor Advisory
http://www.osvdb.org/15423
http://www.raffon.net/advisories/maxthon/multvulns.html
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/13074
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/20033

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maxthon:maxthon:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:maxthon:maxthon:1.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01222

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-q5pj-x273-rmw7

github

почти 4 года назад