Lucene search
HistoryMay 16, 2014 - 3:55 p.m.
CVE-2014-1613
dotclear
cve-2014-1613
remote code execution
php
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is not properly handled by (1) inc/public/lib.urlhandlers.php or (2) plugins/pages/_public.php.
Affected configurations
Node
dotcleardotclearRange≤2.6.1
ORdotcleardotclearMatch2.0
ORdotcleardotclearMatch2.0beta_2
ORdotcleardotclearMatch2.0beta_3
ORdotcleardotclearMatch2.0beta_4
ORdotcleardotclearMatch2.0beta_5.2
ORdotcleardotclearMatch2.0beta_5.4
ORdotcleardotclearMatch2.0beta_6
ORdotcleardotclearMatch2.0beta_7
ORdotcleardotclearMatch2.0rc1
ORdotcleardotclearMatch2.0rc2
ORdotcleardotclearMatch2.0.1
ORdotcleardotclearMatch2.0.2
ORdotcleardotclearMatch2.1
ORdotcleardotclearMatch2.1.1
ORdotcleardotclearMatch2.1.3
ORdotcleardotclearMatch2.1.4
ORdotcleardotclearMatch2.1.5
ORdotcleardotclearMatch2.1.6
ORdotcleardotclearMatch2.1.7
ORdotcleardotclearMatch2.2
ORdotcleardotclearMatch2.2.1
ORdotcleardotclearMatch2.2.2
ORdotcleardotclearMatch2.2.3
ORdotcleardotclearMatch2.3.0
ORdotcleardotclearMatch2.3.1
ORdotcleardotclearMatch2.4.2
ORdotcleardotclearMatch2.4.3
ORdotcleardotclearMatch2.4.4
ORdotcleardotclearMatch2.5.0
ORdotcleardotclearMatch2.5.1
ORdotcleardotclearMatch2.5.2
ORdotcleardotclearMatch2.5.3
ORdotcleardotclearMatch2.6-
ORdotcleardotclearMatch2.6rc
Related
nvd
nvd
CVE-2014-1613
2014-05-16 15:55:04
cvelist
cvelist
CVE-2014-1613
2014-05-16 15:00:00
ubuntucve
ubuntucve
CVE-2014-1613
2014-05-16 00:00:00
prion
prion
Default credentials
2014-05-16 15:55:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
76.4%
Related for CVE-2014-1613