Lucene search

K
cveMitreCVE-2008-6610
HistoryApr 06, 2009 - 4:30 p.m.

CVE-2008-6610

2009-04-0616:30:00
CWE-22
mitre
web.nvd.nist.gov
21
cve-2008-6610
absolute path traversal
phpcksec
stefan ott
file parameter
directory listing
remote attackers
vulnerability

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.3%

Absolute path traversal vulnerability in phpcksec.php in Stefan Ott phpcksec 0.2.0 allows remote attackers to list arbitrary directories and read arbitrary files via a full pathname in the file parameter.

Affected configurations

Nvd
Node
ottphpcksecMatch0.2
VendorProductVersionCPE
ottphpcksec0.2cpe:2.3:a:ott:phpcksec:0.2:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.3%

Related for CVE-2008-6610