Lucene search

K
cve[email protected]CVE-2008-0798
HistoryFeb 15, 2008 - 10:00 p.m.

CVE-2008-0798

2008-02-1522:00:00
CWE-22
web.nvd.nist.gov
24
cve-2008-0798
directory traversal
artmedic
webdesign
weblog
vulnerability
remote attackers
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.9%

Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a … (dot dot) in the (1) ta parameter to artmedic_index.php, reached through index.php; and the (2) date parameter to artmedic_print.php.

Affected configurations

NVD
Node
artmedic_webdesignartmedic_weblogMatch1.0

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

86.9%

Related for CVE-2008-0798