Lucene search

K
cve[email protected]CVE-2008-2689
HistoryJun 13, 2008 - 7:41 p.m.

CVE-2008-2689

2008-06-1319:41:00
CWE-94
web.nvd.nist.gov
21
php
remote file inclusion
browsercrm
vulnerability
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter.

Affected configurations

NVD
Node
browsercrmbrowsercrmMatch5.002.00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

Related for CVE-2008-2689