« Volver al listado

CVE-2010-0403

Estado: ModificadaMedia (6.8)—

Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Phpgroupware — Phpgroupware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0403",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-05-19T12:08:08.070",
  "references": [
    {
      "url": "http://download.phpgroupware.org/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/39665",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/39731",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2010/dsa-2046",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511299/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/40167",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1145",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1146",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58657",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://download.phpgroupware.org/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/39665",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/39731",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2010/dsa-2046",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511299/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/40167",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1145",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/1146",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58657",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en el archivo about.php en phpGroupWare (phpgw) anterior a v0.9.16.016 permite a atacantes remotos incluir y ejecutar archivos locales de su elección a través de .. (punto punto) en el parámetro \"app\"."
    }
  ],
  "lastModified": "2026-06-16T23:16:05.583",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "959D31B3-F41E-4C42-8685-FBB6B4204AEC",
              "versionEndIncluding": "0.9.16.015"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BC3FE8A4-497F-4282-828F-C14BB01B553D"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C011E73-A072-421D-8500-C414A5B67BF0"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B21818A9-9E32-4535-A8DA-CB57D1004E2A"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2FBB83A-AADB-44D2-A227-2D76D4EF40CA"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D7BA9C4-E9B0-420A-936F-50EAC81B7EBC"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.005:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE7F6B19-F4E1-48F0-86ED-E5A21DE7EB2F"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.010:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E02256AC-1BE6-423D-A974-61D5EF137573"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.011:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "159181D8-BED8-4DED-9B48-E0E126C4DFF4"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.012:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB63C1A0-4C62-424B-A858-09DB6AB19BEF"
            },
            {
              "criteria": "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.014:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B4CAA53-0E0B-43FB-93F2-C8BA44CB0A51"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}