CVE-2008-5860
17h00 +00:00
CVE の説明
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Improper Limitation of a Pathname to a Restricted Directory The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. |
メトリクス
| メトリクス | スコア | 深刻度 | CVSS ベクター | 出典 |
|---|---|---|---|---|
| V2 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSSスコア
EPSSパーセンタイル
エクスプロイト情報
Exploit Database EDB-ID : 7529
公開日 : 2008-12-18 23h00 +00:00
著者 : fuzion
EDB検証済み : Yes
関連製品
構成 0
Constructr>>Constructr-cms >> Version ～まで（含む） 3.02.5
Constructr>>Constructr-cms >> Version 3.00.0
Constructr>>Constructr-cms >> Version 3.00.1
Constructr>>Constructr-cms >> Version 3.00.2
Constructr>>Constructr-cms >> Version 3.01.0
Constructr>>Constructr-cms >> Version 3.01.1
Constructr>>Constructr-cms >> Version 3.01.2
Constructr>>Constructr-cms >> Version 3.01.3
Constructr>>Constructr-cms >> Version 3.01.4
Constructr>>Constructr-cms >> Version 3.01.5
Constructr>>Constructr-cms >> Version 3.01.6
Constructr>>Constructr-cms >> Version 3.01.7
Constructr>>Constructr-cms >> Version 3.01.8
Constructr>>Constructr-cms >> Version 3.01.9
Constructr>>Constructr-cms >> Version 3.02.0
Constructr>>Constructr-cms >> Version 3.02.1
Constructr>>Constructr-cms >> Version 3.02.2
Constructr>>Constructr-cms >> Version 3.02.3
Constructr>>Constructr-cms >> Version 3.02.4
