Lucene search

K
cveMitreCVE-2008-6316
HistoryFeb 27, 2009 - 11:30 a.m.

CVE-2008-6316

2009-02-2711:30:00
CWE-22
mitre
web.nvd.nist.gov
24
cve-2008-6316
nvd
directory traversal
phpmygallery 1.0_beta2
remote code execution

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

75.0%

Directory traversal vulnerability in _conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the lang parameter, a different issue than CVE-2008-6316 and a different vector than CVE-2008-6318.

Affected configurations

Nvd
Node
phpmygalleryphpmygalleryMatch1.0beta2
VendorProductVersionCPE
phpmygalleryphpmygallery1.0cpe:2.3:a:phpmygallery:phpmygallery:1.0:beta2:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

75.0%

Related for CVE-2008-6316