Lucene search
HistoryOct 18, 2008 - 12:18 a.m.
CVE-2008-4602
cve-2008-4602
directory traversal
post affiliate pro 2.0
remote authentication
vulnerability
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.8%
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a … (dot dot) in the md parameter.
Affected configurations
Node
qualityunitpost_affiliate_proMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| qualityunit:post_affiliate_pro | qualityunit post affiliate pro | eq | 2.0 |
Related
prion
prion
Directory traversal
2008-10-18 00:18:00
cvelist
cvelist
CVE-2008-4602
2008-10-17 22:00:00
nvd
nvd
CVE-2008-4602
2008-10-18 00:18:53
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.8%
Related for CVE-2008-4602