Vulnerabilities > CVE-2002-0879 - Unspecified vulnerability in Gafware Cfximage 1.6.4/1.6.6

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
gafware
exploit available
NVD
Published: 2002-10-04
Updated: 2008-09-05

Summary

showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.

Vulnerable Configurations

Part Description Count
Application
Gafware
2

Exploit-Db

descriptionGafware CFXImage 1.6.4/1.6.6 ShowTemp File Disclosure Vulnerability. CVE-2002-0879. Webapps exploit for cfm platform
idEDB-ID:21493
last seen2016-02-02
modified2002-05-29
published2002-05-29
reporterRichard Brain
sourcehttps://www.exploit-db.com/download/21493/
titleGafware CFXImage 1.6.4/1.6.6 ShowTemp File Disclosure Vulnerability

References