7.8
CVE-2007-2285
- EPSS 9.86%
- Veröffentlicht 26.04.2007 19:19:00
- Zuletzt bearbeitet 16.06.2026 22:39:17
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginDirectory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a .. (dot dot) in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jack Slocum ≫ Ext Js Version1.0_alpha1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 9.86% | 0.95 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:C/I:N/A:N
|
http://attrition.org/pipermail/vim/2007-April/001545.html
http://attrition.org/pipermail/vim/2007-April/001546.html
http://attrition.org/pipermail/vim/2007-April/001549.html
http://osvdb.org/35561
http://www.securityfocus.com/bid/23643
https://exchange.xforce.ibmcloud.com/vulnerabilities/33864
https://www.exploit-db.com/exploits/3800