Lucene search

K
cveMitreCVE-2008-6006
HistoryJan 30, 2009 - 6:30 p.m.

CVE-2008-6006

2009-01-3018:30:00
CWE-94
mitre
web.nvd.nist.gov
20
cve-2008-6006
php
remote file inclusion
vulnerability
micronation banking system
minba 1.5.0
utdb_access.php
utgn_message.php

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.021

Percentile

89.5%

Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0 allow remote attackers to execute arbitrary PHP code via a URL in the minsoft_path parameter to (1) utdb_access.php and (2) utgn_message.php in utility/.

Affected configurations

Nvd
Node
minbankmicronation_banking_systemMatch1.5.0
VendorProductVersionCPE
minbankmicronation_banking_system1.5.0cpe:2.3:a:minbank:micronation_banking_system:1.5.0:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.021

Percentile

89.5%

Related for CVE-2008-6006