Lucene search
HistoryFeb 26, 2009 - 4:17 p.m.
CVE-2008-6290
cve-2008-6290
directory traversal
includefile.php
niclor sito
remote attackers
arbitrary files
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
Directory traversal vulnerability in includefile.php in nicLOR Sito, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a … (dot dot) in the page_file parameter.
Affected configurations
Node
niclorinclude_sitoMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| niclor:include_sito | niclor include sito | eq | - |
Related
cvelist
cvelist
CVE-2008-6290
2009-02-26 16:00:00
nvd
nvd
CVE-2008-6290
2009-02-26 16:17:19
prion
prion
Directory traversal
2009-02-26 16:17:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
Related for CVE-2008-6290