Lucene search
HistoryDec 01, 2008 - 3:30 p.m.
CVE-2008-5291
cve-2008-5291
directory traversal
fuzzylime 3.03
remote code execution
nvd
7.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%
Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter, a different vector than CVE-2007-4805 and CVE-2008-3165.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fuzzylime:fuzzylime_cms | fuzzylime fuzzylime cms | eq | 3.03 |
Related
prion
prion
Directory traversal
2008-12-01 15:30:00
Directory traversal
2008-07-14 23:41:00
Directory traversal
2007-09-11 18:17:00
openvas
openvas
fuzzylime cms code/track.php Local File Inclusion Vulnerability
2008-12-15 00:00:00
cve
cve
CVE-2008-3165
2008-07-14 23:41:00
CVE-2007-4805
2007-09-11 18:17:00
7.3 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.03 Low
EPSS
Percentile
90.8%
Related for CVE-2008-5291