Lucene search
HistoryOct 09, 2008 - 6:14 p.m.
CVE-2008-4522
cve
directory traversal
vulnerability
jmweb
mp3
music
audio
search
download
script
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
90.9%
Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a … (dot dot) in the src parameter to (1) listen.php and (2) download.php.
Affected configurations
Node
jesse-webjmweb_mp3_music_audio_search_and_download_script
Related
cvelist
cvelist
CVE-2008-4522
2008-10-09 18:00:00
prion
prion
Directory traversal
2008-10-09 18:14:00
nvd
nvd
CVE-2008-4522
2008-10-09 18:14:15
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.03 Low
EPSS
Percentile
90.9%
Related for CVE-2008-4522