CVE-2011-5136

EUVD-2011-5036
showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
epractizelabssubscription_manager
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/77505
http://seclists.org/fulldisclosure/2011/Dec/125
http://secunia.com/advisories/47072
https://exchange.xforce.ibmcloud.com/vulnerabilities/71630
http://osvdb.org/77505
http://seclists.org/fulldisclosure/2011/Dec/125
http://secunia.com/advisories/47072
https://exchange.xforce.ibmcloud.com/vulnerabilities/71630