CVE-2010-1267

Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the com parameter to (1) cContactus.php, (2) cGuestbook.php, and (3) cArticle.php.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://inj3ct0r.com/exploits/11394	Exploit
http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt	Exploit
http://www.exploit-db.com/exploits/11831	Exploit
http://www.securityfocus.com/bid/38993	Exploit
http://www.vupen.com/english/advisories/2010/0674	Vendor Advisory
http://inj3ct0r.com/exploits/11394	Exploit
http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt	Exploit
http://www.exploit-db.com/exploits/11831	Exploit
http://www.securityfocus.com/bid/38993	Exploit
http://www.vupen.com/english/advisories/2010/0674	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:kjetiltroan:webmaid_cms:*:beta:*:*:*:*:*:*

History

21 Nov 2024, 01:14

Type	Values Removed	Values Added
References	~~() http://inj3ct0r.com/exploits/11394 - Exploit~~	() http://inj3ct0r.com/exploits/11394 - Exploit
References	~~() http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt - Exploit~~	() http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt - Exploit
References	~~() http://www.exploit-db.com/exploits/11831 - Exploit~~	() http://www.exploit-db.com/exploits/11831 - Exploit
References	~~() http://www.securityfocus.com/bid/38993 - Exploit~~	() http://www.securityfocus.com/bid/38993 - Exploit
References	~~() http://www.vupen.com/english/advisories/2010/0674 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2010/0674 - Vendor Advisory

Information

Published : 2010-04-06 15:30

Updated : 2025-04-11 00:51

NVD link : CVE-2010-1267

Mitre link : CVE-2010-1267

CVE.ORG link : CVE-2010-1267

JSON object : View

Products Affected

kjetiltroan

webmaid_cms

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2010-1267", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-04-06T15:30:00.500", "references": [{"url": "http://inj3ct0r.com/exploits/11394", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/11831", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/38993", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/0674", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://inj3ct0r.com/exploits/11394", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://packetstormsecurity.org/1003-exploits/webmaid-rfilfi.txt", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.exploit-db.com/exploits/11831", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/38993", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/0674", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the com parameter to (1) cContactus.php, (2) cGuestbook.php, and (3) cArticle.php."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de salto de directorio en WebMaid CMS 0.2-6 Beta y anteriores, permite a atacantes remotos leer ficheros de forma arbitraria a traves de secuencias de salto de directorio en el parametro \"com\" a (1) cContactus.php, (2) cGuestbook.php, y (3) cArticle.php."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kjetiltroan:webmaid_cms:*:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A89B3C16-E708-434C-8432-8E6391D56534", "versionEndIncluding": "0.2-6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}