Lucene search
MitreCVE-2008-2887HistoryJun 27, 2008 - 6:41 p.m.
CVE-2008-2887
2008-06-2718:41:00
CWE-22
mitre
web.nvd.nist.gov
20
cve-2008-2887
nvd
chaozz@work
index.php
remote code execution
security vulnerability
file inclusion
dot dot
page parameter
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
High
EPSS
0.018
Percentile
88.1%
Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the page parameter.
Affected configurations
Node
chaozzatworkfubarforumMatch1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chaozzatwork | fubarforum | 1.5 | cpe:2.3:a:chaozzatwork:fubarforum:1.5:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
FubarForum 1.5 - 'index.php' Local File Inclusion
2008-06-20 00:00:00
nvd
nvd
CVE-2008-2887
2008-06-27 18:41:00
cvelist
cvelist
CVE-2008-2887
2008-06-27 18:00:00
prion
prion
Directory traversal
2008-06-27 18:41:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
High
EPSS
0.018
Percentile
88.1%
Related for CVE-2008-2887