Lucene search
HistoryFeb 20, 2008 - 9:44 p.m.
CVE-2008-0843
cve-2008-0843
statcountex
sensitive information
configuration scripts
remote attackers
admin.asp
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp.
Affected configurations
Node
statcountexstatcountexMatch3.0
ORstatcountexstatcountexMatch3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| statcountex:statcountex | statcountex | eq | 3.0 |
| statcountex:statcountex | statcountex | eq | 3.1 |
Related
prion
prion
Design/Logic Flaw
2008-02-20 21:44:00
nvd
nvd
CVE-2008-0843
2008-02-20 21:44:00
cvelist
cvelist
CVE-2008-0843
2008-02-20 21:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2008-0843