Lucene search
HistoryMar 13, 2008 - 2:44 p.m.
CVE-2008-1324
cve-2008-1324
directory traversal
index.php
travelsized cms
remote attackers
arbitrary local files
nvd
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.026 Low
EPSS
Percentile
90.3%
Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1325.
Affected configurations
Node
leinirtravelsized_cmsMatch0.4.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| leinir:travelsized_cms | leinir travelsized cms | eq | 0.4.1 |
Related
nvd
nvd
CVE-2008-1325
2008-03-13 14:44:00
CVE-2008-1324
2008-03-13 14:44:00
cvelist
cvelist
CVE-2008-1324
2008-03-13 14:00:00
CVE-2008-1325
2008-03-13 14:00:00
prion
prion
Directory traversal
2008-03-13 14:44:00
Directory traversal
2008-03-13 14:44:00
cve
cve
CVE-2008-1325
2008-03-13 14:44:00
7.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.026 Low
EPSS
Percentile
90.3%
Related for CVE-2008-1324