Lucene search
HistoryJan 12, 2008 - 2:46 a.m.
CVE-2008-0246
security
vulnerability
uploadscript
administrator privileges
remote attack
7.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
77.4%
admin.php in UploadScript 1.0 does not check for the original password before making a change to a new password, which allows remote attackers to gain administrator privileges via the pass parameter in a nopass (Set Password) action.
Affected configurations
Node
uploadscriptuploadimageMatch1.0
ORuploadscriptuploadscriptMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| uploadscript:uploadimage | uploadscript uploadimage | eq | 1.0 |
| uploadscript:uploadscript | uploadscript | eq | 1.0 |
Related
nvd
nvd
CVE-2008-0246
2008-01-12 02:46:00
cvelist
cvelist
CVE-2008-0246
2008-01-12 02:00:00
prion
prion
Design/Logic Flaw
2008-01-12 02:46:00
7.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2008-0246