Lucene search

[email protected]CVE-2008-3564

HistoryAug 10, 2008 - 8:41 p.m.

CVE-2008-3564

2008-08-1020:41:00

CWE-22

[email protected]

web.nvd.nist.gov

cve

2008

3564

dayfox

blog 4

index.php

directory traversal

vulnerability

remote file inclusion

security vulnerability

nvd

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON

Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the (1) p, (2) cat, and (3) archive parameters. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

CPENameOperatorVersion
dayfox_designs:dayfox_blogdayfox designs dayfox blogeq4

CPE	Name	Operator	Version
dayfox_designs:dayfox_blog	dayfox designs dayfox blog	eq	4

References

securityreason.com/securityalert/4122

www.securityfocus.com/bid/30538

exchange.xforce.ibmcloud.com/vulnerabilities/44203

www.exploit-db.com/exploits/6203

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON

Related for CVE-2008-3564

prion1 cvelist1