CVE-2007-0893

Опубликовано: 12 фев. 2007

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in phpMyVisites before 2.2 allows remote attackers to include arbitrary files via leading ".." sequences on the pmv_ck_view COOKIE parameter, which bypasses the protection scheme.

Ссылки

http://marc.info/?l=full-disclosure&m=117121596803908&w=2
Third Party Advisory
http://osvdb.org/33178
Broken Link
http://www.securityfocus.com/archive/1/459792/100/0/threaded
http://www.securityfocus.com/bid/22516
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32433
http://marc.info/?l=full-disclosure&m=117121596803908&w=2
Third Party Advisory
http://osvdb.org/33178
Broken Link
http://www.securityfocus.com/archive/1/459792/100/0/threaded
http://www.securityfocus.com/bid/22516
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32433

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:matthieu_aubry:phpmyvisites:*:*:*:*:*:*:*:*

Версия до 2.1 (включая)

cpe:2.3:a:matthieu_aubry:phpmyvisites:0.1_beta:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.0:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.1:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.2_beta:*:*:*:*:*:*:*

cpe:2.3:a:matthieu_aubry:phpmyvisites:1.3:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02158

Низкий

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-66r6-2rhj-83mg

github

почти 4 года назад