Lucene search
HistoryApr 04, 2008 - 7:44 p.m.
CVE-2008-1682
cve-2008-1682
php
remote file inclusion
online flashquiz
joomla
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.1%
PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter.
Affected configurations
Node
elearningforceonline_flashquizMatch1.0.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| elearningforce:online_flashquiz | elearningforce online flashquiz | eq | 1.0.2 |
Related
cvelist
cvelist
CVE-2008-1682
2008-04-04 19:00:00
canvas
canvas
Immunity Canvas: JOOMLAOFLQ_INCLUDE
2008-04-04 19:44:00
prion
prion
Remote file inclusion
2008-04-04 19:44:00
nvd
nvd
CVE-2008-1682
2008-04-04 19:44:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.018 Low
EPSS
Percentile
88.1%
Related for CVE-2008-1682