CVE-2011-5136

showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
epractizelabssubscription_manager
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/77505
http://seclists.org/fulldisclosure/2011/Dec/125
http://secunia.com/advisories/47072
https://exchange.xforce.ibmcloud.com/vulnerabilities/71630
http://osvdb.org/77505
http://seclists.org/fulldisclosure/2011/Dec/125
http://secunia.com/advisories/47072
https://exchange.xforce.ibmcloud.com/vulnerabilities/71630