Lucene search
HistoryOct 08, 2008 - 2:00 a.m.
CVE-2008-4490
cve
directory traversal
vulnerability
phpabook
nvd
security
magic quotes
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.8%
Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the userInfo cookie.
Affected configurations
Node
phpabookphpabookRange≤0.8.8b
ORphpabookphpabookMatch0.8.4b
ORphpabookphpabookMatch0.8.6b
ORphpabookphpabookMatch0.8.7b
Related
cvelist
cvelist
CVE-2008-4490
2008-10-08 01:00:00
prion
prion
Directory traversal
2008-10-08 02:00:00
nvd
nvd
CVE-2008-4490
2008-10-08 02:00:01
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.8%
Related for CVE-2008-4490