Lucene search
HistoryJan 30, 2009 - 6:30 p.m.
CVE-2008-6012
cve-2008-6012
directory traversal
vulnerability
pritlog
nvd
security
remote attackers
magic quotes gpc
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the filename parameter in a viewEntry action.
Affected configurations
Node
hardkappritlogRange≤0.4
ORhardkappritlogMatch0.2
ORhardkappritlogMatch0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| hardkap:pritlog | hardkap pritlog | le | 0.4 |
| hardkap:pritlog | hardkap pritlog | eq | 0.2 |
| hardkap:pritlog | hardkap pritlog | eq | 0.3 |
Related
prion
prion
Directory traversal
2009-01-30 18:30:00
nvd
nvd
CVE-2008-6012
2009-01-30 18:30:05
cvelist
cvelist
CVE-2008-6012
2009-01-30 18:03:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.026 Low
EPSS
Percentile
90.4%
Related for CVE-2008-6012