Vulnerability Details : CVE-2002-1628
Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter.
Vulnerability category: Directory traversal
Products affected by CVE-2002-1628
- cpe:2.3:a:mike_spice:mikes_vote_cgi:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mike_spice:mikes_vote_cgi:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mike_spice:mikes_vote_cgi:1.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2002-1628
0.43%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 74 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-1628
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2002-1628
-
http://www.kb.cert.org/vuls/id/250107
Patch;US Government Resource
-
http://www.securityfocus.com/bid/3854
Patch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/7971
Jump to