Lucene search
HistoryOct 08, 2008 - 2:00 a.m.
CVE-2008-4486
cve-2008-4486
directory traversal
sac.php
yerba 6.3
remote execution
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.6%
Directory traversal vulnerability in index.php in SAC.php (SACphp), as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the mod parameter.
Affected configurations
Node
yerbayerbaRange≤6.3
ORyerbayerbaMatch6.28
| CPE | Name | Operator | Version |
|---|---|---|---|
| yerba:yerba | yerba | le | 6.3 |
| yerba:yerba | yerba | eq | 6.28 |
Related
prion
prion
Directory traversal
2008-10-08 02:00:00
cvelist
cvelist
CVE-2008-4486
2008-10-08 01:00:00
nvd
nvd
CVE-2008-4486
2008-10-08 02:00:01
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.1 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.6%
Related for CVE-2008-4486