Lucene search
HistoryJan 12, 2008 - 2:46 a.m.
CVE-2008-0245
cve-2008-0245
admin.php
uploadimage 1.0
remote attackers
administrator privileges
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.5%
admin.php in UploadImage 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.
Affected configurations
Node
uploadscriptuploadimageMatch1.0
ORuploadscriptuploadscriptMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| uploadscript:uploadimage | uploadscript uploadimage | eq | 1.0 |
| uploadscript:uploadscript | uploadscript | eq | 1.0 |
Related
prion
prion
Design/Logic Flaw
2008-01-12 02:46:00
nvd
nvd
CVE-2008-0245
2008-01-12 02:46:00
cvelist
cvelist
CVE-2008-0245
2008-01-12 02:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.5%
Related for CVE-2008-0245