Lucene search

K
cveMitreCVE-2008-6221
HistoryFeb 20, 2009 - 9:30 p.m.

CVE-2008-6221

2009-02-2021:30:01
CWE-94
mitre
web.nvd.nist.gov
33
cve-2008-6221
php
remote file inclusion
vulnerability
dada mail manager
com_dadamail
joomla
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.067

Percentile

94.0%

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.

Affected configurations

Nvd
Node
dadamailprojectdada_mail_managerMatch2.6
AND
joomlajoomla
VendorProductVersionCPE
dadamailprojectdada_mail_manager2.6cpe:2.3:a:dadamailproject:dada_mail_manager:2.6:*:*:*:*:*:*:*
joomlajoomla*cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.067

Percentile

94.0%

Related for CVE-2008-6221