Lucene search

K
cveMitreCVE-2008-1622
HistoryApr 02, 2008 - 5:44 p.m.

CVE-2008-1622

2008-04-0217:44:00
CWE-94
mitre
web.nvd.nist.gov
20
php
remote file inclusion
vulnerability
geecarts
arbitrary code execution
cve-2008-1622

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

75.0%

Multiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute arbitrary PHP code via a URL in the id parameter to (1) show.php, (2) search.php, and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd
Node
geertsen_holdings_incgeecarts
VendorProductVersionCPE
geertsen_holdings_incgeecarts*cpe:2.3:a:geertsen_holdings_inc:geecarts:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

75.0%

Related for CVE-2008-1622