{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-08-31T04:00:00.000Z", "descriptions": [{"lang": "en", "value": "Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T16:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803"}, {"name": "40147", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/40147"}, {"name": "JVN#20452446", "tags": ["third-party-advisory", "x_refsource_JVN"], "url": "http://jvn.jp/jp/JVN%2320452446/index.html"}, {"name": "shoppingbasketpro-information-disclosure(36389)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36389"}, {"name": "40146", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/40146"}, {"name": "26614", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/26614"}, {"name": "25500", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/25500"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-4655", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803", "refsource": "MISC", "url": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803"}, {"name": "40147", "refsource": "OSVDB", "url": "http://osvdb.org/40147"}, {"name": "JVN#20452446", "refsource": "JVN", "url": "http://jvn.jp/jp/JVN%2320452446/index.html"}, {"name": "shoppingbasketpro-information-disclosure(36389)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36389"}, {"name": "40146", "refsource": "OSVDB", "url": "http://osvdb.org/40146"}, {"name": "26614", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/26614"}, {"name": "25500", "refsource": "BID", "url": "http://www.securityfocus.com/bid/25500"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:01:09.916Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803"}, {"name": "40147", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/40147"}, {"name": "JVN#20452446", "tags": ["third-party-advisory", "x_refsource_JVN", "x_transferred"], "url": "http://jvn.jp/jp/JVN%2320452446/index.html"}, {"name": "shoppingbasketpro-information-disclosure(36389)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36389"}, {"name": "40146", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/40146"}, {"name": "26614", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/26614"}, {"name": "25500", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/25500"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-4655", "datePublished": "2007-09-05T02:00:00.000Z", "dateReserved": "2007-09-04T04:00:00.000Z", "dateUpdated": "2024-08-07T15:01:09.916Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cgi-rescue:shopping_basket_professional:*:*:*:*:*:*:*:*", "matchCriteriaId": "647E8A28-D94A-4A6E-BA90-CBE83FF74CFC", "versionEndIncluding": "7.51", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbitrary directories, and possibly read arbitrary files, via directory traversal sequences in unspecified parameters to (1) list.cgi or (2) list2.cgi."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de escalado de directorio en el CGI RESCUE Shopping Basket Professional 7.51 y versiones anteriores permiten a atacantes remotos listar directorios de su elecci\u00f3n y, posiblemente, leer directorios de su elecci\u00f3n, a trav\u00e9s de secuencias de escalado de directorios en par\u00e1metros sin especificar a (1) list.cgi o (2) list2.cgi."}], "evaluatorComment": "Additional information can be found at: http://www.securityfocus.com/bid/25500/info", "id": "CVE-2007-4655", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-09-04T22:17:00.000", "references": [{"source": "cve@mitre.org", "url": "http://jvn.jp/jp/JVN%2320452446/index.html"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/40146"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/40147"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/26614"}, {"source": "cve@mitre.org", "url": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/25500"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36389"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://jvn.jp/jp/JVN%2320452446/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/40146"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/40147"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/26614"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20070823212803"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/25500"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36389"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}