Lucene search
HistorySep 24, 2008 - 2:56 p.m.
CVE-2008-4206
cve-2008-4206
php
remote file inclusion
config.php
attachmax dolphin 2.1.0
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.7%
PHP remote file inclusion vulnerability in config.php in Attachmax Dolphin 2.1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.
Affected configurations
Node
attachmaxdolphinMatch2.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| attachmax:dolphin | attachmax dolphin | eq | 2.1.0 |
Related
cvelist
cvelist
CVE-2008-4206
2008-09-24 14:00:00
prion
prion
Remote file inclusion
2008-09-24 14:56:00
nvd
nvd
CVE-2008-4206
2008-09-24 14:56:52
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.02 Low
EPSS
Percentile
88.7%
Related for CVE-2008-4206