CVE-2009-2222

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail.

Vulnerabilidad de salto de directorio en PHP-I-BOARD 1.2 y versiones anteriores permite a atacantes remotos leer ficheros de su elección mediante secuencias de salto de directorio en vectores no especificados, probablemente en relación con el correo.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-06-26 CVE Reserved
2009-06-26 CVE Published
2024-09-16 CVE Updated
2024-09-17 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (4)

URL	Tag	Source
http://jvn.jp/jp/JVN32788272/index.html	Third Party Advisory
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000046.html	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://php.s3.to/bbs/bbs8.php	2009-07-07
http://secunia.com/advisories/35532	2009-07-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Php.s3 Search vendor "Php.s3"		Php-i-board Search vendor "Php.s3" for product "Php-i-board"				<= 1.2 Search vendor "Php.s3" for product "Php-i-board" and version " <= 1.2"		-		Affected
Php.s3 Search vendor "Php.s3"		Php-i-board Search vendor "Php.s3" for product "Php-i-board"				1.0 Search vendor "Php.s3" for product "Php-i-board" and version "1.0"		-		Affected
Php.s3 Search vendor "Php.s3"		Php-i-board Search vendor "Php.s3" for product "Php-i-board"				1.1 Search vendor "Php.s3" for product "Php-i-board" and version "1.1"		-		Affected