Lucene search
HistoryJul 02, 2008 - 5:14 p.m.
CVE-2008-2974
cve
2008
2974
directory traversal
mm chat
vulnerability
remote attack
local files
parameter
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.8%
Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter.
Affected configurations
Node
mm_chatmm_chatMatch1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| mm_chat:mm_chat | mm chat | eq | 1.5 |
Related
cvelist
cvelist
CVE-2008-2974
2008-07-02 17:00:00
nvd
nvd
CVE-2008-2974
2008-07-02 17:14:00
prion
prion
Directory traversal
2008-07-02 17:14:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.8%
Related for CVE-2008-2974