Lucene search

K
cveMitreCVE-2008-4739
HistoryOct 24, 2008 - 10:30 a.m.

CVE-2008-4739

2008-10-2410:30:01
CWE-22
mitre
web.nvd.nist.gov
24
cve
2008
4739
directory traversal
vulnerability
plugspace 0.1
magic_quotes_gpc
remote attackers
arbitrary files
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

82.4%

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the navi parameter.

Affected configurations

Nvd
Node
plugspaceplugspaceMatch0.1
VendorProductVersionCPE
plugspaceplugspace0.1cpe:2.3:a:plugspace:plugspace:0.1:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

82.4%

Related for CVE-2008-4739