NVD
- Id
- 55464
- Name
- CVE-2007-3312
- Description
- Directory traversal vulnerability in admin/plugin_manager.php in Jasmine CMS 1.0 allows remote authenticated administrators to include and execute arbitrary local files a .. (dot dot) in the u parameter. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers.
- Reject
- CVSS Version
- 2
- CVSS Score
- 9
- Severity
- High
- CVSS Base Score
- 9
- CVSS Impact Subscore
- 10
- CVSS Exploit Subscore
- 8
- CVSS Vector
- (AV:N/AC:L/Au:S/C:C/I:C/A:C)
- Pub Date
- 2017-01-07
- Published
- 2007-06-21
- Modified Date
- 2011-03-07
- Seq
- 2007-3312