Detections
Analytics
KorWeblog < 1.6.2 Remote Directory Listing
medium Nessus Network Monitor Plugin ID 2433
Synopsis
The remote host may give an attacker information useful for future attacks.Description
The remote host is using KorWeblog, a web-based log application written in PHP. A vulnerability exists in the remote version of this product that may allow a remote attacker to disclose directory listings. Information disclosures could help the attacker in further attacks.Solution
Upgrade to version 1.6.2 or higher.Plugin Details
Severity: Medium
ID: 2433
Family: CGI
Published: 11/24/2004
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 5.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:H/RL:W/RC:X
Vulnerability Information
CPE: cpe:/a:korweblog:korweblog