Find a vulnerability

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000494.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "A directory traversal vulnerability exists in a sample CGI download program included with KDDI\u0027s EZFactory.\r\n\r\nA sample CGI download program is included with KDDI\u0027s EZFactory for downloading and saving data such as images and ringtones to EZweb compatible cellular phones. A directory traversal vulnerability exists in this program.",
  "link": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000494.html",
  "sec:cpe": {
    "#text": "cpe:/a:kddi:download_cgi_sample_program",
    "@product": "Download CGI Sample Program",
    "@vendor": "KDDI",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2007-000494",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN33593387/index.html",
      "@id": "JVN#33593387",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3692",
      "@id": "CVE-2007-3692",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3692",
      "@id": "CVE-2007-3692",
      "@source": "NVD"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/35323",
      "@id": "35323",
      "@source": "XF"
    },
    {
      "#text": "http://securitytracker.com/id?1018344",
      "@id": "1018344",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.vupen.com/english/advisories/2007/2472",
      "@id": "VUPEN/ADV-2007-2472",
      "@source": "VUPEN"
    },
    {
      "#text": "http://osvdb.org/38453",
      "@id": "38453",
      "@source": "OSVDB"
    }
  ],
  "title": "KDDI sample CGI download program directory traversal vulnerability"
}