Lucene search

K
cve[email protected]CVE-2008-2885
HistoryJun 27, 2008 - 6:41 p.m.

CVE-2008-2885

2008-06-2718:41:00
CWE-94
web.nvd.nist.gov
17
cve-2008-2885
php
remote file inclusion
odars 1.0.2
vulnerability
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

PHP remote file inclusion vulnerability in src/browser/resource/categories/resource_categories_view.php in Open Digital Assets Repository System (ODARS) 1.0.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CLASSES_ROOT parameter.

Affected configurations

NVD
Node
odarsodarsMatch1.0.2
CPENameOperatorVersion
odars:odarsodarseq1.0.2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

Related for CVE-2008-2885