NVD

Id
54452  
Name
CVE-2007-2285  
Description
Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read arbitrary files via a .. (dot dot) in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-04-26  
Modified Date
2008-11-13  
Seq
2007-2285  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276193 54452 CVE-2007-2285 20070426 False: ext 1.0 alpha1 (feed-proxy.php) Remote File Disclosure  View
276194 54452 CVE-2007-2285 20070426 Re: False: ext 1.0 alpha1 (feed-proxy.php) Remote File Disclosure  View
276195 54452 CVE-2007-2285 20070426 re: False: ext 1.0 alpha1 (feed-proxy.php) Remote File Disclosure  View
276196 54452 CVE-2007-2285 3800  View
276197 54452 CVE-2007-2285 23643  View
276198 54452 CVE-2007-2285 ext-feedproxy-directory-traversal(33864)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55062 JVNDB-2007-003754 Ext JS の examples/layout/feed-proxy.php におけるディレクトリトラバーサルの脆弱性 Jack Slocum Ext (Ext JS) の examples/layout/feed-proxy.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-2285 25640 CVE-2007-2285 54452 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003754.html 2007-04-26 2012-09-25 View