Lucene search
HistoryApr 07, 2009 - 2:17 p.m.
CVE-2008-6651
cve-2008-6651
static code injection
oxyproject
oxybox
remote attackers
php code
vulnerability
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
84.9%
Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter.
Affected configurations
Node
oxyprojectoxyboxMatch0.85
| CPE | Name | Operator | Version |
|---|---|---|---|
| oxyproject:oxybox | oxyproject oxybox | eq | 0.85 |
Related
nvd
nvd
CVE-2008-6651
2009-04-07 14:17:18
cvelist
cvelist
CVE-2008-6651
2009-04-07 10:00:00
prion
prion
Code injection
2009-04-07 14:17:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
84.9%
Related for CVE-2008-6651