Lucene search

K
cve[email protected]CVE-2008-3368
HistoryJul 30, 2008 - 5:41 p.m.

CVE-2008-3368

2008-07-3017:41:00
CWE-94
web.nvd.nist.gov
17
cve
php
remote file inclusion
vulnerability
atutor 1.6.1

7.2 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.03 Low

EPSS

Percentile

90.9%

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.

Affected configurations

NVD
Node
atutoratutorRange1.6.1pl1
OR
atutoratutorMatch0.9.6
OR
atutoratutorMatch0.9.7
OR
atutoratutorMatch1.0
OR
atutoratutorMatch1.2.1
OR
atutoratutorMatch1.2.2
OR
atutoratutorMatch1.3
OR
atutoratutorMatch1.3.1
OR
atutoratutorMatch1.3.2
OR
atutoratutorMatch1.3.3
OR
atutoratutorMatch1.4
OR
atutoratutorMatch1.4.1
OR
atutoratutorMatch1.4.2
OR
atutoratutorMatch1.4.3
OR
atutoratutorMatch1.5.1
OR
atutoratutorMatch1.5.2
OR
atutoratutorMatch1.5.3
OR
atutoratutorMatch1.5.3.1
OR
atutoratutorMatch1.5.3.2
OR
atutoratutorMatch1.5.4
OR
atutoratutorMatch1.5.5
OR
atutoratutorMatch1.6

7.2 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.03 Low

EPSS

Percentile

90.9%

Related for CVE-2008-3368