Lucene search

K
cveMitreCVE-2008-4632
HistoryOct 21, 2008 - 1:18 a.m.

CVE-2008-4632

2008-10-2101:18:02
CWE-22
mitre
web.nvd.nist.gov
26
cve
2008
4632
directory traversal
kure
security vulnerabilities
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.018

Percentile

88.3%

Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a … (dot dot) in the (1) post and (2) doc parameters.

Affected configurations

Nvd
Node
kurekureMatch0.6.3
VendorProductVersionCPE
kurekure0.6.3cpe:2.3:a:kure:kure:0.6.3:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.018

Percentile

88.3%

Related for CVE-2008-4632