Lucene search
HistoryApr 25, 2008 - 7:05 p.m.
CVE-2008-1958
cve-2008-1958
file upload vulnerability
tr script news 2.1
remote code execution
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.2%
Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with a .php extension.
Affected configurations
Node
easyscriptstr_script_newsMatch2.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| easyscripts:tr_script_news | easyscripts tr script news | eq | 2.1 |
Related
cvelist
cvelist
CVE-2008-1958
2008-04-25 14:00:00
nvd
nvd
CVE-2008-1958
2008-04-25 19:05:00
prion
prion
Unrestricted file upload
2008-04-25 19:05:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.2%
Related for CVE-2008-1958