Lucene search
HistoryMay 08, 2008 - 4:20 p.m.
CVE-2008-2116
cve
2008
2116
directory traversal
editor.php
scriptsez.net
power editor 2.0
remote attackers
arbitrary files
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.5%
Multiple directory traversal vulnerabilities in editor.php in ScriptsEZ.net Power Editor 2.0 allow remote attackers to read arbitrary local files via a … (dot dot) in the (1) te and (2) dir parameters in a tempedit action.
Affected configurations
Node
scriptsezpower_editorMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| scriptsez:power_editor | scriptsez power editor | eq | 2.0 |
Related
cvelist
cvelist
CVE-2008-2116
2008-05-08 16:00:00
nvd
nvd
CVE-2008-2116
2008-05-08 16:20:00
prion
prion
Directory traversal
2008-05-08 16:20:00
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.5%
Related for CVE-2008-2116