Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-3239
HistoryJul 21, 2008 - 4:41 p.m.

CVE-2008-3239

2008-07-2116:41:00
CWE-20
[email protected]
web.nvd.nist.gov
145
cve-2008-3239
file upload
phpizabi
security vulnerability
remote code execution
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.089 Low

EPSS

Percentile

94.6%

JSON

Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code via a filename in the CONF[CRON_LOGFILE] parameter and file contents in the CONF[LOCALE_LONG_DATE_TIME] parameter.

Affected configurations

NVD
Node
phpizabiphpizabiMatch0.848bc1
OR
phpizabiphpizabiMatch0.848bc1_hfp1
CPENameOperatorVersion
phpizabi:phpizabiphpizabieq0.848b

Related

exploitdb 1
packetstorm 1
prion 1
exploitpack 1
nvd 1
seebug 2
cvelist 1
exploitdb
exploitdb
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
2009-03-23 00:00:00
packetstorm
packetstorm
PHPizabi 0.848b C1 HFP1-3 Command Execution
2009-03-24 00:00:00
prion
prion
Unrestricted file upload
2008-07-21 16:41:00
exploitpack
exploitpack
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
2009-03-23 00:00:00
nvd
nvd
CVE-2008-3239
2008-07-21 16:41:00
seebug
seebug
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution Exploit
2014-07-01 00:00:00
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
2009-03-24 00:00:00
cvelist
cvelist
CVE-2008-3239
2008-07-21 16:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.089 Low

EPSS

Percentile

94.6%

JSON
Related for CVE-2008-3239
exploitdb1packetstorm1prion1exploitpack1nvd1seebug2cvelist1