Lucene search
HistorySep 29, 2008 - 7:25 p.m.
CVE-2008-4319
cve-2008-4319
libra file manager
authentication bypass
remote attack
file manipulation
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.3%
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.
Affected configurations
Node
libra_file_managerphp_filemanagerRange≤1.18
ORlibra_file_managerphp_filemanagerMatch1.00
ORlibra_file_managerphp_filemanagerMatch1.03
ORlibra_file_managerphp_filemanagerMatch1.05
ORlibra_file_managerphp_filemanagerMatch1.08
ORlibra_file_managerphp_filemanagerMatch1.17
Related
cvelist
cvelist
CVE-2008-4319
2008-09-29 18:00:00
prion
prion
Authentication flaw
2008-09-29 19:25:00
nvd
nvd
CVE-2008-4319
2008-09-29 19:25:35
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.3%
Related for CVE-2008-4319