Lucene search

K
cve[email protected]CVE-2008-3166
HistoryJul 14, 2008 - 11:41 p.m.

CVE-2008-3166

2008-07-1423:41:00
CWE-94
web.nvd.nist.gov
25
php
remote file inclusion
vulnerability
boonex ray 3.5
cve-2008-3166

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.061 Low

EPSS

Percentile

93.6%

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter.

Affected configurations

NVD
Node
boonexrayMatch3.5
CPENameOperatorVersion
boonex:rayboonex rayeq3.5

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.061 Low

EPSS

Percentile

93.6%

Related for CVE-2008-3166