Lucene search

K
cveMitreCVE-2008-2495
HistoryMay 28, 2008 - 3:32 p.m.

CVE-2008-2495

2008-05-2815:32:00
CWE-22
mitre
web.nvd.nist.gov
20
cve-2008-2495
directory traversal vulnerability
zina 1.0 rc3
remote attackers
security issue
information security

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.008

Percentile

81.2%

Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a … (dot dot) in the p parameter.

Affected configurations

Nvd
Node
pancakezinaMatch1.0_rc3
VendorProductVersionCPE
pancakezina1.0_rc3cpe:2.3:a:pancake:zina:1.0_rc3:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.7

Confidence

Low

EPSS

0.008

Percentile

81.2%

Related for CVE-2008-2495