Lucene search

MitreCVE-2008-4188

HistorySep 23, 2008 - 5:01 p.m.

CVE-2008-4188

2008-09-2317:01:22

CWE-94

mitre

web.nvd.nist.gov

cve-2008-4188

typo3

kw_secdir

vulnerability

remote code execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.031

Percentile

91.2%

JSON

Unspecified vulnerability in the TYPO3 Secure Directory (kw_secdir) extension before 1.0.2 allows remote attackers to execute arbitrary code via unknown vectors related to “injection of control characters.”

Affected configurations

Nvd

Node

typo3secure_directoryRange≤1.0.1

typo3secure_directoryMatch0.1.3

typo3secure_directoryMatch1.0.0

VendorProductVersionCPE
typo3secure_directory*cpe:2.3:a:typo3:secure_directory:*:*:*:*:*:*:*:*
typo3secure_directory0.1.3cpe:2.3:a:typo3:secure_directory:0.1.3:*:*:*:*:*:*:*
typo3secure_directory1.0.0cpe:2.3:a:typo3:secure_directory:1.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
typo3	secure_directory	*	cpe:2.3:a:typo3:secure_directory::::::::
typo3	secure_directory	0.1.3	cpe:2.3:a:typo3:secure_directory:0.1.3:::::::*
typo3	secure_directory	1.0.0	cpe:2.3:a:typo3:secure_directory:1.0.0:::::::*

References

secunia.com/advisories/31897

typo3.org/extensions/repository/view/kw_secdir/1.0.2/

www.securityfocus.com/bid/31253

exchange.xforce.ibmcloud.com/vulnerabilities/45260

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.031

Percentile

91.2%

JSON

Related for CVE-2008-4188