Lucene search
HistoryMar 09, 2009 - 2:30 p.m.
CVE-2008-6446
cve-2008-6446
static code injection
cms maxsite
guestbook
remote code execution
vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
84.9%
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter.
Affected configurations
Node
geniuscybermaxsiteMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| geniuscyber:maxsite | geniuscyber maxsite | eq | - |
Related
prion
prion
Code injection
2009-03-09 14:30:00
cvelist
cvelist
CVE-2008-6446
2009-03-09 14:00:00
nvd
nvd
CVE-2008-6446
2009-03-09 14:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
84.9%
Related for CVE-2008-6446