CVE-2010-0403

Опубликовано: 19 мая 2010

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.

Ссылки

http://download.phpgroupware.org/
Patch
Vendor Advisory
http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
Patch
http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
http://secunia.com/advisories/39665
Vendor Advisory
http://secunia.com/advisories/39731
Vendor Advisory
http://www.debian.org/security/2010/dsa-2046
http://www.securityfocus.com/archive/1/511299/100/0/threaded
http://www.securityfocus.com/bid/40167
http://www.vupen.com/english/advisories/2010/1145
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2010/1146
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58657
http://download.phpgroupware.org/
Patch
Vendor Advisory
http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0
Patch
http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html
http://secunia.com/advisories/39665
Vendor Advisory
http://secunia.com/advisories/39731
Vendor Advisory
http://www.debian.org/security/2010/dsa-2046
http://www.securityfocus.com/archive/1/511299/100/0/threaded
http://www.securityfocus.com/bid/40167
http://www.vupen.com/english/advisories/2010/1145
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*

Версия до 0.9.16.015 (включая)

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.005:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.010:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.011:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.012:*:*:*:*:*:*:*

cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.014:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00659

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVE-2010-0403

ubuntu

больше 15 лет назад

Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.

CVE-2010-0403

debian

больше 15 лет назад

Directory traversal vulnerability in about.php in phpGroupWare (phpgw) ...

GHSA-875q-qqc7-vvpg

github

больше 3 лет назад

Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.

EPSS

Процентиль: 70%

0.00659

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-22