Lucene search

K
cve[email protected]CVE-2008-4351
HistorySep 30, 2008 - 6:15 p.m.

CVE-2008-4351

2008-09-3018:15:08
CWE-22
web.nvd.nist.gov
24
cve-2008-4351
directory traversal
phpsmartcom 0.2
vulnerability
remote code execution
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a … (dot dot) in the p parameter.

Affected configurations

NVD
Node
phpsmartcomphpsmartcomMatch0.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

Related for CVE-2008-4351