Lucene search
HistoryFeb 27, 2008 - 7:44 p.m.
CVE-2008-1042
cve-2008-1042
linux web shop
php download manager
vulnerability
directory traversal
remote attackers
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.2%
Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the content parameter.
Affected configurations
Node
linux_web_shopphp_download_managerRange≤1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| linux_web_shop:php_download_manager | linux web shop php download manager | le | 1.1 |
Related
nvd
nvd
CVE-2008-1042
2008-02-27 19:44:00
prion
prion
Directory traversal
2008-02-27 19:44:00
cvelist
cvelist
CVE-2008-1042
2008-02-27 19:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.2%
Related for CVE-2008-1042