Lucene search

K
cve[email protected]CVE-2008-0458
HistoryJan 25, 2008 - 4:00 p.m.

CVE-2008-0458

2008-01-2516:00:00
CWE-22
web.nvd.nist.gov
17
cve
2008
0458
directory traversal
vulnerability
slaed cms 2.5 lite
remote attackers
arbitrary execution
local files

7.9 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.0%

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the newlang parameter to index.php.

7.9 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.0%

Related for CVE-2008-0458