Lucene search
HistoryJan 26, 2009 - 8:30 p.m.
CVE-2008-5968
cve
2008-5968
directory traversal
vulnerability
print.php
php icalendar
remote attackers
arbitrary local files
cookie_language parameter
phpicalendar_* cookie
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.6%
Directory traversal vulnerability in print.php in PHP iCalendar 2.24 and earlier allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the cookie_language parameter in a phpicalendar_* cookie, a different vector than CVE-2006-1292.
Affected configurations
Node
phpicalendarphpicalendarRange≤2.24
ORphpicalendarphpicalendarMatch0.7
ORphpicalendarphpicalendarMatch0.8
ORphpicalendarphpicalendarMatch0.9
ORphpicalendarphpicalendarMatch0.9.5
ORphpicalendarphpicalendarMatch1.0
ORphpicalendarphpicalendarMatch1.1
ORphpicalendarphpicalendarMatch2.0beta
ORphpicalendarphpicalendarMatch2.0.1
ORphpicalendarphpicalendarMatch2.0c
ORphpicalendarphpicalendarMatch2.1
ORphpicalendarphpicalendarMatch2.2
ORphpicalendarphpicalendarMatch2.21
ORphpicalendarphpicalendarMatch2.22
ORphpicalendarphpicalendarMatch2.23
ORphpicalendarphpicalendarMatch2.23rc1
Related
ubuntucve
ubuntucve
CVE-2008-5968
2009-01-26 00:00:00
cvelist
cvelist
CVE-2008-5968
2009-01-26 20:00:00
CVE-2006-1292
2006-03-19 23:00:00
prion
prion
Directory traversal
2009-01-26 20:30:00
Directory traversal
2006-03-19 23:02:00
nvd
nvd
CVE-2008-5968
2009-01-26 20:30:00
CVE-2006-1292
2006-03-19 23:02:00
openvas
openvas
Multiple Vulnerabilities in PHP iCalendar
2009-01-29 00:00:00
Multiple Vulnerabilities in PHP iCalendar
2009-01-29 00:00:00
cve
cve
CVE-2006-1292
2006-03-19 23:02:00
nessus
nessus
PHP iCalendar Cookie Data Traversal Local File Inclusion
2006-03-16 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.2 High
AI Score
Confidence
Low
0.016 Low
EPSS
Percentile
87.6%
Related for CVE-2008-5968