Lucene search
HistoryJan 08, 2008 - 7:46 p.m.
CVE-2008-0144
cve-2008-0144
php
remote file inclusion
netrisk 1.9.7
vulnerability
arbitrary code execution
7.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.5%
PHP remote file inclusion vulnerability in index.php in NetRisk 1.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: this can also be leveraged for local file inclusion using directory traversal sequences.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phprisk:netrisk | phprisk netrisk | eq | 1.9.7 |
Related
prion
prion
Directory traversal
2008-01-08 19:46:00
Cross site scripting
2008-01-09 22:46:00
canvas
canvas
Immunity Canvas: NETRISK_INCLUDE
2008-01-08 19:46:00
cve
cve
CVE-2008-0186
2008-01-09 22:46:00
7.6 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.5%
Related for CVE-2008-0144