Lucene search

K
cveMitreCVE-2008-1962
HistoryApr 25, 2008 - 7:05 p.m.

CVE-2008-1962

2008-04-2519:05:00
CWE-22
mitre
web.nvd.nist.gov
25
cve
2008
1962
directory traversal
vulnerabilities
aterr 0.9.1
remote attackers
arbitrary local files
include
execute
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.01

Percentile

83.6%

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the (1) class parameter to include/functions.inc.php and the (2) file parameter to include/common.inc.php.

Affected configurations

Nvd
Node
chimaeraaterrMatch0.9.1
VendorProductVersionCPE
chimaeraaterr0.9.1cpe:2.3:a:chimaera:aterr:0.9.1:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.01

Percentile

83.6%

Related for CVE-2008-1962