Lucene search

MitreCVE-2008-4704

HistoryOct 23, 2008 - 5:17 p.m.

CVE-2008-4704

2008-10-2317:17:14

CWE-94

mitre

web.nvd.nist.gov

php

remote file inclusion

sezhoo

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter.

Affected configurations

Nvd

Node

mitresezhooMatch0.1

VendorProductVersionCPE
mitresezhoo0.1cpe:2.3:a:mitre:sezhoo:0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mitre	sezhoo	0.1	cpe:2.3:a:mitre:sezhoo:0.1:::::::*

References

securityreason.com/securityalert/4473

www.securityfocus.com/bid/31756

exchange.xforce.ibmcloud.com/vulnerabilities/45859

www.exploit-db.com/exploits/6751

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

Related for CVE-2008-4704