Lucene search
HistoryOct 23, 2008 - 8:00 p.m.
CVE-2008-4720
cve-2008-4720
php
remote file inclusion
gemini portal 4.7
vulnerability
nvd
execute arbitrary code
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
Low
0.059 Low
EPSS
Percentile
93.5%
Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) page/forums/bottom.php and (2) page/forums/category.php.
Affected configurations
Node
arzdevgemini_portalMatch4.7
| CPE | Name | Operator | Version |
|---|---|---|---|
| arzdev:gemini_portal | arzdev gemini portal | eq | 4.7 |
Related
prion
prion
Remote file inclusion
2008-10-23 20:00:00
nvd
nvd
CVE-2008-4720
2008-10-23 20:00:01
cvelist
cvelist
CVE-2008-4720
2008-10-23 18:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
Low
0.059 Low
EPSS
Percentile
93.5%
Related for CVE-2008-4720