Lucene search
HistoryOct 14, 2008 - 10:36 p.m.
CVE-2008-4557
cutenews
strawberry
remote code execution
php
cve-2008-4557
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.045 Low
EPSS
Percentile
92.5%
plugins/wacko/highlight/html.php in Strawberry in CuteNews.ru 1.1.1 (aka Strawberry) allows remote attackers to execute arbitrary PHP code via the text parameter, which is inserted into an executable regular expression.
Affected configurations
Node
cutephpcutenewsMatch1.1.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| cutephp:cutenews | cutephp cutenews | eq | 1.1.1 |
Related
nvd
nvd
CVE-2008-4557
2008-10-14 22:36:58
prion
prion
Code injection
2008-10-14 22:36:00
canvas
canvas
Immunity Canvas: CUTENEWS_EXEC
2008-10-14 22:36:00
cvelist
cvelist
CVE-2008-4557
2008-10-14 22:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.045 Low
EPSS
Percentile
92.5%
Related for CVE-2008-4557