Lucene search

K
cve[email protected]CVE-2008-4330
HistorySep 30, 2008 - 5:22 p.m.

CVE-2008-4330

2008-09-3017:22:09
CWE-22
web.nvd.nist.gov
16
cve
2008
4330
directory traversal
vulnerability
lansuite 3.3.2
index.php
remote attack
arbitrary file inclusion

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%

Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the design parameter.

Affected configurations

NVD
Node
lansuitelansuiteMatch3.3.2
CPENameOperatorVersion
lansuite:lansuitelansuiteeq3.3.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.5%

Related for CVE-2008-4330