Lucene search
HistoryNov 28, 2008 - 7:00 p.m.
CVE-2008-5265
cve-2008-5265
directory traversal
remote code execution
tnt forum 0.9.4
nvd.
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
87.1%
Directory traversal vulnerability in index.php in TNT Forum 0.9.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the modulo parameter.
Affected configurations
Node
tntforumtnt_forumMatch0.9.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| tntforum:tnt_forum | tntforum tnt forum | eq | 0.9.4 |
Related
cvelist
cvelist
CVE-2008-5265
2008-11-28 18:26:00
nvd
nvd
CVE-2008-5265
2008-11-28 19:00:03
prion
prion
Directory traversal
2008-11-28 19:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
High
0.015 Low
EPSS
Percentile
87.1%
Related for CVE-2008-5265