Lucene search

K
cveMitreCVE-2008-2217
HistoryMay 14, 2008 - 6:20 p.m.

CVE-2008-2217

2008-05-1418:20:00
CWE-22
mitre
web.nvd.nist.gov
25
cve
content management system
phprojekt
directory traversal
remote code execution

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.008

Percentile

82.2%

Directory traversal vulnerability in cm/graphie.php in Content Management System 0.6.1 for Phprojekt allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the cm_imgpath parameter.

Affected configurations

Nvd
Node
mario_valdezcontent_management_systemMatch0.6.1
VendorProductVersionCPE
mario_valdezcontent_management_system0.6.1cpe:2.3:a:mario_valdez:content_management_system:0.6.1:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.008

Percentile

82.2%

Related for CVE-2008-2217