Lucene search

K
cve[email protected]CVE-2008-5694
HistoryDec 19, 2008 - 6:30 p.m.

CVE-2008-5694

2008-12-1918:30:00
CWE-94
web.nvd.nist.gov
28
cve-2008-5694
php
remote file inclusion
vulnerability
sandbox
aditus jpgraph
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.2%

PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treated as an issue in Sandbox.

Affected configurations

NVD
Node
sandboxsandboxMatch1.4.1
CPENameOperatorVersion
sandbox:sandboxsandboxeq1.4.1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.2%

Related for CVE-2008-5694