CVE-2007-1140 - CERT CVE

  1. CVE-2007-1140

ID CVE-2007-1140
Sažetak Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a .. (dot dot) in the filename parameter.
Reference
CVSS
Base: 9.4
Impact: 9.2
Exploitability:10.0
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE NONE
CVSS vektor AV:N/AC:L/Au:N/C:C/I:C/A:N
Zadnje važnije ažuriranje 16-10-2018 - 16:36
Objavljeno 02-03-2007 - 21:18