NVD

Id
50424  
Name
CVE-2009-3219  
Description
Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the a parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-09-16  
Modified Date
2009-09-17  
Seq
2009-3219  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
255047 50424 CVE-2009-3219 9237  View
255048 50424 CVE-2009-3219 awcm-a-file-include(51979)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45302 JVNDB-2009-006309 AWCM の a.php におけるディレクトリトラバーサルの脆弱性 AR Web Content Manager (AWCM) の a.php には、magic_quotes_gpc が無効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-3219 40650 CVE-2009-3219 50424 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006309.html 2009-09-16 2012-12-20 View