Lucene search
HistoryAug 12, 2009 - 10:30 a.m.
CVE-2008-6960
x10media
mp3
search engine
script
remote file read
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.048 Low
EPSS
Percentile
92.8%
download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php.
Affected configurations
Node
x10mediax10_automatic_mp3_scriptMatch1.5.5
ORx10mediax10_automatic_mp3_scriptMatch1.6
Related
prion
prion
Design/Logic Flaw
2009-08-12 10:30:00
nvd
nvd
CVE-2008-6960
2009-08-12 10:30:01
cvelist
cvelist
CVE-2008-6960
2009-08-12 10:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.048 Low
EPSS
Percentile
92.8%
Related for CVE-2008-6960