Lucene search

K
cve[email protected]CVE-2008-4667
HistoryOct 22, 2008 - 10:30 a.m.

CVE-2008-4667

2008-10-2210:30:01
CWE-22
web.nvd.nist.gov
20
cve
2008
4667
directory traversal
arabcms
remote attack
vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%

Directory traversal vulnerability in rss.php in ArabCMS 2.0 beta 1 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the rss parameter.

Affected configurations

NVD
Node
arabcmsarabcmsMatch2.0beta1
CPENameOperatorVersion
arabcms:arabcmsarabcmseq2.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.2%

Related for CVE-2008-4667