Lucene search
HistoryApr 07, 2009 - 2:17 p.m.
CVE-2008-6643
lokicms
cve-2008-6643
remote attackers
access control
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.025 Low
EPSS
Percentile
90.3%
LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows remote attackers to bypass intended restrictions and modify configuration settings via the LokiACTION parameter in a direct request to admin.php.
Affected configurations
Node
lokicmslokicmsMatch0.3.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| lokicms:lokicms | lokicms | eq | 0.3.4 |
Related
nvd
nvd
CVE-2008-6643
2009-04-07 14:17:17
prion
prion
Design/Logic Flaw
2009-04-07 14:17:00
cvelist
cvelist
CVE-2008-6643
2009-04-07 10:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.025 Low
EPSS
Percentile
90.3%
Related for CVE-2008-6643