Vulnerability Details CVE-2003-1298
Multiple directory traversal vulnerabilities in siteman.php3 in AnyPortal(php) 12 MAY 00 allow remote attackers to (1) create, (2) delete, (3) save, and (4) upload files by navigating to the root directory and entering a filename beginning with "./.." (dot slash dot dot).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://nger.org/anyportal/forum/read.php?f=1&i=152&t=152#reply_152
- http://secunia.com/advisories/19359
- http://www.osvdb.org/23984
- http://www.securityfocus.com/bid/17197
- http://www.vupen.com/english/advisories/2006/1053
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25396
- http://nger.org/anyportal/forum/read.php?f=1&i=152&t=152#reply_152
- http://secunia.com/advisories/19359
- http://www.osvdb.org/23984
- http://www.securityfocus.com/bid/17197
- http://www.vupen.com/english/advisories/2006/1053
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25396
Products affected by CVE-2003-1298
-
cpe:2.3:a:anyportal_php:anyportal_php:0.1