Lucene search
HistoryDec 03, 2008 - 7:30 p.m.
CVE-2008-5322
cve-2008-5322
wysi wiki wyg
remote attackers
system information
phpinfo
security vulnerability
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%
Wysi Wiki Wyg 1.0 allows remote attackers to obtain system information via an invalid categup parameter to index.php, which calls the phpinfo function.
Affected configurations
Node
easy-scriptwysi_wiki_wygMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| easy-script:wysi_wiki_wyg | easy-script wysi wiki wyg | eq | 1.0 |
Related
prion
prion
Code injection
2008-12-03 19:30:00
cvelist
cvelist
CVE-2008-5322
2008-12-03 19:00:00
nvd
nvd
CVE-2008-5322
2008-12-03 19:30:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.4 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.8%
Related for CVE-2008-5322