Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5844
HistoryJan 05, 2009 - 12:00 a.m.

CVE-2008-5844

2009-01-0500:00:00
ubuntu.com
ubuntu.com
17

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.004

Percentile

72.8%

PHP 5.2.7 contains an incorrect change to the FILTER_UNSAFE_RAW
functionality, and unintentionally disables magic_quotes_gpc regardless of
the actual magic_quotes_gpc setting, which might make it easier for
context-dependent attackers to conduct SQL injection attacks and
unspecified other attacks.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.004

Percentile

72.8%