Lucene search

K
cve[email protected]CVE-2008-0158
HistoryJan 09, 2008 - 12:46 a.m.

CVE-2008-0158

2008-01-0900:46:00
CWE-22
web.nvd.nist.gov
19
cve-2008-0158
directory traversal
vulnerability
shop-script 2.0
nvd

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.5%

Directory traversal vulnerability in index.php in Shop-Script 2.0 and possibly other versions allows remote attackers to read arbitrary files via a … (dot dot) in the aux_page parameter.

Affected configurations

NVD
Node
shop-scriptshop-scriptMatch2.0

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.014 Low

EPSS

Percentile

86.5%

Related for CVE-2008-0158