Lucene search
HistoryMay 05, 2008 - 4:20 p.m.
CVE-2008-2076
cve-2008-2076
directory traversal
admin.php
actualscripts
actualanalyzer lite 2.78
remote attack
arbitrary file inclusion
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.025 Low
EPSS
Percentile
90.1%
Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the style parameter.
Affected configurations
Node
actualscriptsactualanalyzer_liteMatch2.78
| CPE | Name | Operator | Version |
|---|---|---|---|
| actualscripts:actualanalyzer_lite | actualscripts actualanalyzer lite | eq | 2.78 |
Related
cvelist
cvelist
CVE-2008-2076
2008-05-05 16:00:00
nvd
nvd
CVE-2008-2076
2008-05-05 16:20:00
nessus
nessus
ActualAnalyzer Lite style Parameter Traversal Local File Inclusion
2008-05-02 00:00:00
prion
prion
Directory traversal
2008-05-05 16:20:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.025 Low
EPSS
Percentile
90.1%
Related for CVE-2008-2076