Lucene search

K
cveMitreCVE-2008-2294
HistoryMay 18, 2008 - 2:20 p.m.

CVE-2008-2294

2008-05-1814:20:00
CWE-264
mitre
web.nvd.nist.gov
19
cve-2008-2294
pet grooming management system
privilege escalation
useradded.php
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.021

Percentile

89.1%

Pet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct request to useradded.php with a modified user name for “admin.”

Affected configurations

Nvd
Node
mreavespet_grooming_management_systemMatch2.0
VendorProductVersionCPE
mreavespet_grooming_management_system2.0cpe:2.3:a:mreaves:pet_grooming_management_system:2.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.021

Percentile

89.1%

Related for CVE-2008-2294