CVE-2004-1505 in JAF CMS

Riassunto

di MITRE

Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 18/02/2005
• Divulgazione: 31/12/2004
• Moderazione: accettato
• Voce: VDB-22788
• CPE: pronto
• CWE: CWE-22 (confermato)
• CVSS: 7.3 (VulDB)
• EPSS: 0.01996
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1505
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1505
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1505/