Lucene search

[email protected]CVE-2008-5856

HistoryJan 06, 2009 - 5:30 p.m.

CVE-2008-5856

2009-01-0617:30:00

CWE-22

[email protected]

web.nvd.nist.gov

directory traversal

vulnerability

class

scripts

export.php

ftype parameter

remote attackers

arbitrary files

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

JSON

Directory traversal vulnerability in scripts/export.php in ClaSS before 0.8.61 allows remote attackers to read arbitrary files via directory traversal sequences in the ftype parameter.

Affected configurations

NVD

Node

classclassRange≤0.8.60

classclassMatch0.4beta

classclassMatch0.4.0

classclassMatch0.4.1

classclassMatch0.4.2

classclassMatch0.5.0

classclassMatch0.5.1

classclassMatch0.5.2

classclassMatch0.6.0

classclassMatch0.6.1

classclassMatch0.8rc2

classclassMatch0.8.0

classclassMatch0.8.0rc1

classclassMatch0.8.5

classclassMatch0.8.8

classclassMatch0.8.10

classclassMatch0.8.14

classclassMatch0.8.20

classclassMatch0.8.26

classclassMatch0.8.29

classclassMatch0.8.32

classclassMatch0.8.40

classclassMatch0.8.47

classclassMatch0.8.51

classclassMatch0.8.56

classclassMatch0.8.59

CPENameOperatorVersion
class:classclassle0.8.60
class:classclasseq0.4
class:classclasseq0.4.0
class:classclasseq0.4.1
class:classclasseq0.4.2
class:classclasseq0.5.0
class:classclasseq0.5.1
class:classclasseq0.5.2
class:classclasseq0.6.0
class:classclasseq0.6.1

CPE	Name	Operator	Version
class:class	class	le	0.8.60
class:class	class	eq	0.4
class:class	class	eq	0.4.0
class:class	class	eq	0.4.1
class:class	class	eq	0.4.2
class:class	class	eq	0.5.0
class:class	class	eq	0.5.1
class:class	class	eq	0.5.2
class:class	class	eq	0.6.0
class:class	class	eq	0.6.1

Rows per page:

1-10 of 251

References

osvdb.org/50807

secunia.com/advisories/33222

sourceforge.net/project/shownotes.php?release_id=648307

www.securityfocus.com/bid/32929

exchange.xforce.ibmcloud.com/vulnerabilities/47493

www.exploit-db.com/exploits/7579

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.5%

JSON

Related for CVE-2008-5856

prion1 cvelist1 nvd1