Lucene search

[email protected]CVE-2008-5090

HistoryNov 14, 2008 - 7:20 p.m.

CVE-2008-5090

2008-11-1419:20:53

CWE-94

[email protected]

web.nvd.nist.gov

electron inc.

advanced electron forum

cve-2008-5090

nvd

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.118 Low

EPSS

Percentile

95.3%

JSON

Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.

Affected configurations

NVD

Node

anelectronadvanced_electron_forumRange≤1.0.6

anelectronadvanced_electron_forumMatch1.0.1

anelectronadvanced_electron_forumMatch1.0.2

anelectronadvanced_electron_forumMatch1.0.3

anelectronadvanced_electron_forumMatch1.0.4

anelectronadvanced_electron_forumMatch1.0.5

CPENameOperatorVersion
anelectron:advanced_electron_forumanelectron advanced electron forumle1.0.6
anelectron:advanced_electron_forumanelectron advanced electron forumeq1.0.1
anelectron:advanced_electron_forumanelectron advanced electron forumeq1.0.2
anelectron:advanced_electron_forumanelectron advanced electron forumeq1.0.3
anelectron:advanced_electron_forumanelectron advanced electron forumeq1.0.4
anelectron:advanced_electron_forumanelectron advanced electron forumeq1.0.5

CPE	Name	Operator	Version
anelectron:advanced_electron_forum	anelectron advanced electron forum	le	1.0.6
anelectron:advanced_electron_forum	anelectron advanced electron forum	eq	1.0.1
anelectron:advanced_electron_forum	anelectron advanced electron forum	eq	1.0.2
anelectron:advanced_electron_forum	anelectron advanced electron forum	eq	1.0.3
anelectron:advanced_electron_forum	anelectron advanced electron forum	eq	1.0.4
anelectron:advanced_electron_forum	anelectron advanced electron forum	eq	1.0.5

References

secunia.com/advisories/31978

securityreason.com/securityalert/4598

www.anelectron.com/board/index.php?tid=3282

www.gulftech.org/?node=research&article_id=00131-09202008

www.securityfocus.com/archive/1/496552/100/0/threaded

www.securityfocus.com/bid/31268

exchange.xforce.ibmcloud.com/vulnerabilities/45270

www.exploit-db.com/exploits/6499

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.118 Low

EPSS

Percentile

95.3%

JSON

Related for CVE-2008-5090

nvd1 cvelist1 prion1