Lucene search
HistoryApr 17, 2008 - 7:05 p.m.
CVE-2008-1860
cve
code injection
vulnerability
admin.php
lokicms 0.3.3
remote attackers
php code
config.php
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
High
0.056 Low
EPSS
Percentile
93.3%
Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter.
Affected configurations
Node
lokicmslokicmsRange≤0.3.3
ORlokicmslokicmsMatch0.1.0
ORlokicmslokicmsMatch0.1.0rc1
ORlokicmslokicmsMatch0.2.0
ORlokicmslokicmsMatch0.3.0
ORlokicmslokicmsMatch0.3.1b1
ORlokicmslokicmsMatch0.3.1b2
ORlokicmslokicmsMatch0.3.2b1
Related
prion
prion
Code injection
2008-04-17 19:05:00
cvelist
cvelist
CVE-2008-1860
2008-04-17 16:00:00
nvd
nvd
CVE-2008-1860
2008-04-17 19:05:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.3 High
AI Score
Confidence
High
0.056 Low
EPSS
Percentile
93.3%
Related for CVE-2008-1860