Lucene search

MitreCVE-2010-4558

HistoryDec 17, 2010 - 7:00 p.m.

CVE-2010-4558

2010-12-1719:00:26

CWE-94

mitre

web.nvd.nist.gov

phpmyfaq

cve-2010-4558

security

vulnerability

remote code execution

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.007

Percentile

79.7%

JSON

phpMyFAQ 2.6.11 and 2.6.12, as distributed between December 4th and December 15th 2010, contains an externally introduced modification (Trojan Horse) in the getTopTen method in inc/Faq.php, which allows remote attackers to execute arbitrary PHP code.

Affected configurations

Nvd

Node

phpmyfaqphpmyfaqMatch2.6.11

phpmyfaqphpmyfaqMatch2.6.12

VendorProductVersionCPE
phpmyfaqphpmyfaq2.6.11cpe:2.3:a:phpmyfaq:phpmyfaq:2.6.11:*:*:*:*:*:*:*
phpmyfaqphpmyfaq2.6.12cpe:2.3:a:phpmyfaq:phpmyfaq:2.6.12:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyfaq	phpmyfaq	2.6.11	cpe:2.3:a:phpmyfaq:phpmyfaq:2.6.11:::::::*
phpmyfaq	phpmyfaq	2.6.12	cpe:2.3:a:phpmyfaq:phpmyfaq:2.6.12:::::::*

References

secunia.com/advisories/42622

www.phpmyfaq.de/advisory_2010-12-15.php

www.securityfocus.com/bid/45442

www.vupen.com/english/advisories/2010/3254

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.007

Percentile

79.7%

JSON

Related for CVE-2010-4558