ID CVE-2007-0821
Summary Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. (dot dot) in the chemin parameter to (1) mod_news/index.php or (2) mod_news/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
References
Vulnerable Configurations
  • cpe:2.3:a:cedric:claire_portailphp:2:*:*:*:*:*:*:*
    cpe:2.3:a:cedric:claire_portailphp:2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 15-11-2008 - 06:42)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 22381
osvdb
  • 35850
  • 35851
Last major update 15-11-2008 - 06:42
Published 07-02-2007 - 20:28
Back to Top