Lucene search
HistoryOct 21, 2008 - 1:18 a.m.
CVE-2008-4632
cve
2008
4632
directory traversal
kure
security vulnerabilities
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.9%
Multiple directory traversal vulnerabilities in index.php in Kure 0.6.3, when magic_quotes_gpc is disabled, allow remote attackers to read and possibly execute arbitrary local files via a … (dot dot) in the (1) post and (2) doc parameters.
Affected configurations
Node
kurekureMatch0.6.3
Related
nvd
nvd
CVE-2008-4632
2008-10-21 01:18:02
cvelist
cvelist
CVE-2008-4632
2008-10-21 00:00:00
prion
prion
Directory traversal
2008-10-21 01:18:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.9%
Related for CVE-2008-4632