CVE-2010-2104

MEDIUM

4.3

CVSS Severity Score

EPSS Score0.1520%

EPSS Percentile22.82th

Published2010年5月27日

Last Modified2026年4月29日

Vulnerability Description

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element.

Affected Platforms (CPE)

📦

Orbitdownloader

Orbit Downloader

= 3.0.0.4

📦

Orbitdownloader

Orbit Downloader

= 3.0.0.5

References & Advisories

🔗 http://secunia.com/advisories/39527

🔗 http://secunia.com/secunia_research/2010-73/

🔗 http://www.securityfocus.com/archive/1/511348/100/100/threaded

🔗 http://secunia.com/advisories/39527

🔗 http://secunia.com/secunia_research/2010-73/

🔗 http://www.securityfocus.com/archive/1/511348/100/100/threaded

Vulnerability Description

Affected Platforms (CPE)

Orbit Downloader

Orbit Downloader

References & Advisories

相关漏洞威胁