7.5
CVE-2010-0350
- EPSS 1.27%
- Veröffentlicht 15.01.2010 20:30:00
- Zuletzt bearbeitet 16.06.2026 23:15:59
- Erkennungen
LoginDirectory traversal vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arco Van Geest ≫ Goof Fotoboek Version <= 1.7.14
Arco Van Geest ≫ Goof Fotoboek Version 1.2.4
Arco Van Geest ≫ Goof Fotoboek Version 1.4.0
Arco Van Geest ≫ Goof Fotoboek Version 1.4.1
Arco Van Geest ≫ Goof Fotoboek Version 1.5.1
Arco Van Geest ≫ Goof Fotoboek Version 1.6.1
Arco Van Geest ≫ Goof Fotoboek Version 1.6.4
Arco Van Geest ≫ Goof Fotoboek Version 1.7.0
Arco Van Geest ≫ Goof Fotoboek Version 1.7.2
Arco Van Geest ≫ Goof Fotoboek Version 1.7.3
Arco Van Geest ≫ Goof Fotoboek Version 1.7.4
Arco Van Geest ≫ Goof Fotoboek Version 1.7.5
Arco Van Geest ≫ Goof Fotoboek Version 1.7.7
Arco Van Geest ≫ Goof Fotoboek Version 1.7.9
Arco Van Geest ≫ Goof Fotoboek Version 1.7.10
Arco Van Geest ≫ Goof Fotoboek Version 1.7.11
Arco Van Geest ≫ Goof Fotoboek Version 1.7.12
Arco Van Geest ≫ Goof Fotoboek Version 1.7.13
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.27% | 0.661 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/
http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/