Lucene search

K
cveMitreCVE-2008-5217
HistoryNov 24, 2008 - 5:30 p.m.

CVE-2008-5217

2008-11-2417:30:00
CWE-22
mitre
web.nvd.nist.gov
29
cve
directory traversal
vulnerability
txtcms 0.3
index.php
remote attack
arbitrary file inclusion

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

81.4%

Directory traversal vulnerability in index.php in txtCMS 0.3, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the id parameter.

Affected configurations

Nvd
Node
phpc0d3rtxtcmsMatch0.3
VendorProductVersionCPE
phpc0d3rtxtcms0.3cpe:2.3:a:phpc0d3r:txtcms:0.3:*:*:*:*:*:*:*

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

High

EPSS

0.008

Percentile

81.4%

Related for CVE-2008-5217