{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-03T21:49:20.061","vulnerabilities":[{"cve":{"id":"CVE-2014-3777","sourceIdentifier":"cve@mitre.org","published":"2014-07-16T14:19:03.667","lastModified":"2026-06-17T00:08:52.113","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter."},{"lang":"es","value":"Vulnerabilidad de salto de directorio en Reportico PHP Report Designer anterior a 4.0 permite a atacantes remotos leer ficheros arbitrarios a través de un .. (punto punto) en el parámetro xmlin."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3","matchCriteriaId":"0D608202-2EA1-4324-B646-D49A8EECFA5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"809CDA5E-8B2D-4016-963E-EB65C1EFF521"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F744CF6-E5AD-4991-AE43-BE544EA81C79"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D6F5B61-25CE-4C48-B76D-4070FAE786D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C82F6F3B-8EE3-4F37-A388-29B2BC379B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D6594755-63B6-4FBB-8505-9C3CB583F0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4648CB21-E557-41B9-BA4A-CB518BA97AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"65626120-6D1E-4C6A-B131-638D46E80E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163F0101-078D-471B-8A25-5FC1872AF059"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"15469291-8713-4308-9189-5371010EC406"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A760F5E-6F78-4B39-BAF7-BDB80BEDD5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.2:*:*:*:*:*:*:*","matchCriteriaId":"951ED785-B52C-4F05-AD91-0FDD999DACCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.3:*:*:*:*:*:*:*","matchCriteriaId":"43B90C4C-9590-44CA-BBFB-281D8D4ABDC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9839AFD0-751E-47A6-B53F-498232254782"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.4:*:*:*:*:*:*:*","matchCriteriaId":"27730675-213C-4BF0-AB62-54BB5AEB323D"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.4:beta:*:*:*:*:*:*","matchCriteriaId":"3426856B-880F-49A7-8057-1FD3ADE1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.5:*:*:*:*:*:*:*","matchCriteriaId":"5AFB7418-50C4-4623-A53E-D41F79F2A51A"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.6:*:*:*:*:*:*:*","matchCriteriaId":"90F3E1E9-9DE0-410C-B6A8-71B658C58480"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:2.7:*:*:*:*:*:*:*","matchCriteriaId":"F81F8111-AF6D-44B5-A4D9-DB37851AA84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BE683882-C518-4B0F-9BB3-87ED0DF4A4C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:3.1:*:*:*:*:*:*:*","matchCriteriaId":"20590D12-6E2D-4488-8276-2E13AD84622F"},{"vulnerable":true,"criteria":"cpe:2.3:a:reportico:php_report_designer:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C3FF8176-A8A2-4713-9ABE-5605390CDA3C"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/127280/Reportico-Admin-Credential-Leak.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2014/Jun/144","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/108612","source":"cve@mitre.org"},{"url":"http://www.secveritas.com/secv-05-1402.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/127280/Reportico-Admin-Credential-Leak.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2014/Jun/144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/108612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secveritas.com/secv-05-1402.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}