Lucene search

K
cve[email protected]CVE-2008-2884
HistoryJun 27, 2008 - 6:41 p.m.

CVE-2008-2884

2008-06-2718:41:00
CWE-94
web.nvd.nist.gov
12
php
remote file inclusion
rss aggregator
cve-2008-2884
security vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.061 Low

EPSS

Percentile

93.6%

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
rss_aggregatorrss_aggregator

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.061 Low

EPSS

Percentile

93.6%

Related for CVE-2008-2884