Lucene search
HistoryJul 02, 2008 - 5:14 p.m.
CVE-2008-2978
cve-2008-2978
directory traversal
ourvideo cms
remote attackers
arbitrary local files
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.5%
Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter.
Affected configurations
Node
ourvideocmsourvideo_cmsMatch9.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| ourvideocms:ourvideo_cms | ourvideocms ourvideo cms | eq | 9.5 |
Related
cvelist
cvelist
CVE-2008-2978
2008-07-02 17:00:00
nvd
nvd
CVE-2008-2978
2008-07-02 17:14:00
prion
prion
Directory traversal
2008-07-02 17:14:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.5%
Related for CVE-2008-2978