Lucene search
Ubuntu.comUB:CVE-2014-1613HistoryMay 16, 2014 - 12:00 a.m.
CVE-2014-1613
2014-05-1600:00:00
ubuntu.com
ubuntu.com
10
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.4%
Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code
via a serialized object in the dc_passwd cookie to a password-protected
page, which is not properly handled by (1) inc/public/lib.urlhandlers.php
or (2) plugins/pages/_public.php.
Related
nvd
nvd
CVE-2014-1613
2014-05-16 15:55:04
prion
prion
Default credentials
2014-05-16 15:55:00
cvelist
cvelist
CVE-2014-1613
2014-05-16 15:00:00
cve
cve
CVE-2014-1613
2014-05-16 15:55:04
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
76.4%
Related for UB:CVE-2014-1613