Lucene search

K
cveMitreCVE-2008-2016
HistoryApr 30, 2008 - 1:07 a.m.

CVE-2008-2016

2008-04-3001:07:00
CWE-94
mitre
web.nvd.nist.gov
22
cve-2008-2016
php
remote file inclusion
vulnerability
chicomas 2.0.4
arbitrary code execution
directory traversal

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.008

Percentile

81.2%

PHP remote file inclusion vulnerability in Chilek Content Management System (aka ChiCoMaS) 2.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter to the default URI under install/. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences.

Affected configurations

Nvd
Node
chilkat_softwarechicomasMatch2.0.4
VendorProductVersionCPE
chilkat_softwarechicomas2.0.4cpe:2.3:a:chilkat_software:chicomas:2.0.4:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.008

Percentile

81.2%

Related for CVE-2008-2016