Home  >  CVE-2002-1628
CVE Details for CVE: CVE-2002-1628
Summary
Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter.
Timestamps
Last major update 11-07-2017 - 01:29
Published 31-12-2002 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:a:mike_spice:mikes_vote_cgi:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:mike_spice:mikes_vote_cgi:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mike_spice:mikes_vote_cgi:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:mike_spice:mikes_vote_cgi:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mike_spice:mikes_vote_cgi:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:mike_spice:mikes_vote_cgi:1.0:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 3854
cert-vn VU#250107
xf vote-cgi-gain-privileges(7971)