NVD

Id
14869  
Name
CVE-2010-3490  
Description
Directory traversal vulnerability in page.recordings.php in the System Recordings component in the configuration interface in FreePBX 2.8.0 and earlier allows remote authenticated administrators to create arbitrary files via a .. (dot dot) in the usersnum parameter to admin/config.php, as demonstrated by creating a .php file under the web root.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-09-28  
Modified Date
2013-09-03  
Seq
2010-3490  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
82389 14869 CVE-2010-3490 15098  View
82390 14869 CVE-2010-3490 http://www.freepbx.org/trac/ticket/4553  View
82391 14869 CVE-2010-3490 20100923 TWSL2010-005: FreePBX recordings interface allows remote code execution  View
82392 14869 CVE-2010-3490 43454  View
82393 14869 CVE-2010-3490 https://www.trustwave.com/spiderlabs/advisories/TWSL2010-005.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37363 JVNDB-2010-003148 FreePBX の設定インターフェース の System Recordings コンポーネントにおけるディレクトリトラバーサルの脆弱性 FreePBX の設定インターフェース の System Recordings コンポーネントの page.recordings.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-3490 46070 CVE-2010-3490 14869 6.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003148.html 2010-09-28 2012-03-27 View