CVE-2018-16716

CRITICALNuclei

NCBI ToolBox - Directory Traversal

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2018-16716 has a selected CVSS score of 9.1 (critical); EIP currently links 1 Nuclei template.

Description

A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryCRITICALNCBI ToolBox - Directory TraversalCVSS 9.1

NCBI ToolBox 2.0.7 through 2.2.26 legacy versions contain a path traversal vulnerability via viewcgi.cgi which may result in reading of arbitrary files (i.e., significant information disclosure) or file deletion via the nph-viewgif.cgi query string.

Impact

An attacker can view, modify, or delete sensitive files on the server, potentially leading to unauthorized access, data leakage, or system compromise.

Remediation

Apply the latest patch or update from the vendor to fix the directory traversal vulnerability in the NCBI ToolBox.

WeaknessesCWE-22
Authors0x_Akoko
Template tagscvecve2018ncbilfinihvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CPE: cpe:2.3:a:nih:ncbi_toolbox:*:*:*:*:*:*:*:*
https://github.com/grymer/CVE/blob/master/CVE-2018-16716.md https://nvd.nist.gov/vuln/detail/CVE-2018-16716 https://github.com/ARPSyndicate/kenzer-templates https://github.com/grymer/CVE

Source: ProjectDiscovery

References

2